[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 59.325316][ T26] audit: type=1800 audit(1570978081.291:25): pid=8288 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 59.346816][ T26] audit: type=1800 audit(1570978081.301:26): pid=8288 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 59.413516][ T26] audit: type=1800 audit(1570978081.301:27): pid=8288 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.1.48' (ECDSA) to the list of known hosts. 2019/10/13 14:48:11 fuzzer started 2019/10/13 14:48:13 dialing manager at 10.128.0.26:35865 2019/10/13 14:48:13 syscalls: 2368 2019/10/13 14:48:13 code coverage: enabled 2019/10/13 14:48:13 comparison tracing: enabled 2019/10/13 14:48:13 extra coverage: extra coverage is not supported by the kernel 2019/10/13 14:48:13 setuid sandbox: enabled 2019/10/13 14:48:13 namespace sandbox: enabled 2019/10/13 14:48:13 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/13 14:48:13 fault injection: enabled 2019/10/13 14:48:13 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/13 14:48:13 net packet injection: enabled 2019/10/13 14:48:13 net device setup: enabled 2019/10/13 14:48:13 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 14:50:16 executing program 0: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80, 0x800) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000000c0)=0x90, 0x4) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x8001, 0x2, 0x4, 0x4, {0x0, 0x7530}, {0x2, 0xa, 0x9, 0x4, 0x7, 0x0, "7accd097"}, 0x4, 0x3, @userptr=0x800, 0x4}) r2 = request_key(&(0x7f00000001c0)='trusted\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='self\x00', 0xfffffffffffffff8) keyctl$invalidate(0x15, r2) r3 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)="1cb9abe53d2520999e60bca36962a115133dd560d58495ff55e448d6ef87304bf101aa5606ec259afc054e3a007ff7e025a5c471278deb1046cd7cbbee2ccdb6cf33c130f12b2bdb86ff1fc34618d62ebe4806ea33f7f4af0ee42b0331adf2fce91a8ab913c6f68949f46a8865d1b8af4ed218731cd91bdf7e6cbd7fe15e7f5a13ed90effc0c41589113c59cc6a772c3b93d1adf0ea8e356bd5188d2c9c63aba18132432546c24f8575aeac4a2ea9a413bc25f7313a2dccf75", 0xb9, r3) r4 = msgget$private(0x0, 0x100) msgsnd(r4, &(0x7f0000000440)={0x3ba0028853d7a770, "01dbbd286a44dd16426205734832444536c45c6e9212bc29b3f9d763f60844e951d75040c86926ee39ee2fa46794ebf694f604c26c0e6068ca4912ee0f3b44107a972677db4651730cf2622922a4ebb4d28e53590b55fd91f17e46e86d6e89a481b4d637495b38b3da64b5b9e4eac77f129226d69c605cde5876a0e0a354d33a10b14c95f84f4e0ced2a42d530fdb0f276baa43b0baee480"}, 0xa0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r1, 0x0, 0x8, &(0x7f0000000500)='trusted\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000580)={r5}, 0xc) r6 = msgget$private(0x0, 0x4) msgrcv(r6, &(0x7f00000005c0)={0x0, ""/218}, 0xe2, 0x3, 0x5400) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/dlm-control\x00', 0x10801, 0x0) ioctl$EVIOCSABS0(r7, 0x401845c0, &(0x7f0000000700)={0x1, 0x80000001, 0x4, 0x0, 0x8001}) r8 = syz_open_dev$audion(&(0x7f0000000740)='/dev/audio#\x00', 0xdf68, 0x519dfa3c9ced9e74) ioctl$KDSETLED(r8, 0x4b32, 0x8001) r9 = msgget$private(0x0, 0x10) msgctl$MSG_STAT(r9, 0xb, &(0x7f0000000780)=""/232) socketpair(0xf3317e352b25385, 0x2, 0x1, &(0x7f0000000880)={0xffffffffffffffff}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000980)={@multicast2, @remote, 0x0}, &(0x7f00000009c0)=0xc) bind$xdp(r10, &(0x7f0000000a00)={0x2c, 0x7, r11}, 0x10) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000a40)) r12 = syz_open_dev$mice(&(0x7f0000000a80)='/dev/input/mice\x00', 0x0, 0x4000) getsockopt$inet_int(r12, 0x0, 0x13, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000b40)=0x7fffffff, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000b80)=0x7fffffff, 0x4) rt_sigprocmask(0x0, &(0x7f0000000bc0)={0x4}, &(0x7f0000000c00), 0x8) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) 14:50:16 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x7, 0x400) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x8000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f00000000c0)) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000180)={{0x1, 0x0, @descriptor="d3c014746ae68128"}, 0xf1, [], "2ebcf82c7f4d28641f3f2d5ba51fc83fd4b8a7bbc28acb9e7c15d0a7f16c65e28dae25037686dee8a6ca22cada391ec114aa3f9afdfcb777c77a43b39d626e9f3b03d59d34dbb8dd3baf0aec7c420a45acace8403299253d8b2df4a1035e850a9cafd15e5a5607eec47c316e4143ddf8a0b61ec141eecc72366260bcec8391e8da71668be5354c4d706fb138ed59f1e8235d8ef9944aa5bf2f5803fadd591f90a736dc07dfa339e444870928d74b2804d9a75c14bec10d874bfa4d6d71d7a74aab398dd00829163c17e1a600f544f18790690188f058f290c24f0a0009c6133628caa160cf5cd761ff65f11feeb8f93aa4"}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='trusted.overlay.nlink\x00', &(0x7f0000000380)={'L-', 0x7}, 0x28, 0x7) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f00000003c0)={{0x2, 0x0, @reserved="b0337dd22df7d41044170f449140e58fdeb148589b64ecf18ddf87124e801dea"}, 0xdd, [], "c47d46b5213bc37c928c011a4ded60852bdb000edc212b8751a245f8938ff4ad61cef66f9e01baf1041fff3577f2d56852a401ebb95e0b128bba34bc2a5146618518a9fd2f0df9fb783bc51339314a0fb16913ebbb93a34dcdc2914722d816b4ea914264a66a3f55977e35c84b44882059d70c6248c58730edfa640ee9d44c1b07e741451a1d55a695071566bd10b367548eb4d19f241e083175d95929d5e63529586ca67563f37a9362ad377db62561f06cf3d0bafb0e758d28288e941f838b0338121d066a7620e1a5b696343327e43b036e37d046044176ec7fa283"}) r3 = syz_open_dev$dspn(&(0x7f0000000500)='/dev/dsp#\x00', 0x800, 0x2000) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x4) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540)='/dev/hwrng\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, 0xffffffffffffffff) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f00000005c0)={'raw\x00'}, &(0x7f0000000640)=0x54) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000680)=0x20, 0x3, 0xa) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r6, 0x308, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44044}, 0x10) r7 = syz_open_dev$vbi(&(0x7f0000000800)='/dev/vbi#\x00', 0x1, 0x2) ioctl$KVM_S390_UCAS_UNMAP(r7, 0x4018ae51, &(0x7f0000000840)={0x2, 0x1, 0x401}) syz_open_dev$midi(&(0x7f0000000880)='/dev/midi#\x00', 0x264adb50, 0x8000) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_TIMEOUT(r8, 0x0, 0x48a, &(0x7f00000008c0)={0x8, 0x8, 0xff}, 0xc) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000900)='trusted.overlay.redirect\x00', &(0x7f0000000940)='./file0\x00', 0x8, 0x7) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000980)={0x0, @bt={0x7, 0x8, 0x0, 0x3, 0x1, 0x33, 0xffffffff, 0x8, 0xb7b, 0x40, 0x90fc, 0x800, 0x4, 0x4, 0x1, 0x1}}) r9 = syz_open_dev$dspn(&(0x7f0000000a40)='/dev/dsp#\x00', 0xfff, 0x200) ioctl$USBDEVFS_REAPURBNDELAY(r9, 0x4008550d, &(0x7f0000000a80)) r10 = syz_open_dev$usbmon(&(0x7f0000000ac0)='/dev/usbmon#\x00', 0x5, 0x20401) write$binfmt_elf32(r10, &(0x7f0000000b00)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0xbb, 0x2, 0x53, 0x9, 0x2, 0x6, 0x1, 0x378, 0x38, 0x1c5, 0x9, 0x1, 0x20, 0x1, 0x4, 0x200, 0x5}, [{0x58000007, 0x70, 0x80000000, 0x9, 0x80000001, 0x6, 0x1f, 0x2}, {0x0, 0x1000, 0x20, 0x0, 0xbb, 0x6, 0x5b19, 0x6}], "6f49ae7f0d32b9ea4d401abf80f43cda04825f514129c60bea6dde9fa7a665e2a8f20bbd314df9f2c33afbdcdee51c3f67d68457e3e29fe68cd7da7bc56954f0", [[], [], [], [], [], [], [], [], [], []]}, 0xab8) syzkaller login: [ 194.903860][ T8456] IPVS: ftp: loaded support on port[0] = 21 [ 194.922303][ T8457] IPVS: ftp: loaded support on port[0] = 21 14:50:17 executing program 2: getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000000)={'mangle\x00', 0x84, "760707660d159ef6fcabdafedfb55da3b95d16dd1753200ad4f67d0afb92c3d1a74d1bdb3d5a2a3d94269216d461fcdcee9b12c5dde840f9a91010581a534d2f70f10313ff7151677d34843f922463376366f62f80ed0f373697208dcedb926a4961451b37b11ba25147c6cd0f3a4babfd192eda8fd8c3c08c9e91dfc426725c65ce4edd"}, &(0x7f00000000c0)=0xa8) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x1, 0x0) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000140)={0x1, 0x0, [{}]}) r1 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x6, 0xc800) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000002c0)={0x0, @initdev, @empty}, &(0x7f0000000300)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0x3, &(0x7f00000001c0)=@raw=[@map={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x5, 0x7, 0x8, 0x8, 0xffffff75}], &(0x7f0000000200)='GPL\x00', 0x6, 0x68, &(0x7f0000000240)=""/104, 0x41000, 0x3, [], r2, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0xd, 0x0, 0x1}, 0x10}, 0x70) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x24400dc}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r3, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x100040c0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000580)={'broute\x00'}, &(0x7f0000000600)=0x78) r4 = syz_open_dev$midi(&(0x7f0000000640)='/dev/midi#\x00', 0xffffffffffffffff, 0x20000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'nr0\x00', r2}) r5 = syz_open_dev$cec(&(0x7f00000006c0)='/dev/cec#\x00', 0x0, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r5, 0x4004ae8b, &(0x7f0000000700)={0x1000, "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"}) read(r0, &(0x7f0000001740)=""/246, 0xf6) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000001840)='/dev/audio\x00', 0x121442, 0x0) sendto(0xffffffffffffffff, &(0x7f0000001880)="97d1f802ac15891080c2116b4536a75c4f37be3ecdef91045e0c5e634eb1b7293d539e3f16f065fe06033714019421d4121fbfa1a65c7d60a6e1698d7fd0da7401770f85e5c3cd8bca54f3de32b4de2a928c6df267740f43986ee63c83cb9f75b29bf725bdb5addf18d0f847fa5f9447b1c9b86c4fe677e89b95b6", 0x7b, 0x1, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000001900)="e470be2571a49597d90acb3eea30e1b9f839d14a344277bd2f38e120ae2d7b0c337d6679b22aef8cbe7d66070baa369758a1371a2ecfb8d1913425f01ccdd775504eb4e7bb2bf46619", 0x49) r7 = socket$xdp(0x2c, 0x3, 0x0) pread64(r7, &(0x7f0000001980)=""/167, 0xa7, 0x0) write$P9_RLINK(r4, &(0x7f0000001a40)={0x7, 0x47, 0x1}, 0x7) utime(&(0x7f0000001a80)='./file0\x00', &(0x7f0000001ac0)={0x2, 0xfffffffffffffffa}) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001b00)='/dev/dsp\x00', 0xc3332f3b4537abd, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000001c00)={0x0, 0x84, &(0x7f0000001b40)=[@in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e21, 0x80000000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80}, @in6={0xa, 0x4e23, 0x8e0, @loopback, 0x7}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x800, @local, 0x6}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x8, 0x0}}]}, &(0x7f0000001c40)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f0000001c80)={r9, 0xf4, "64f2582fd4968c2af90020fefa3c08c9739c7018ac484b7f123e495c1dfaa60ef6899a33490750b38588efd2f2f5a53cc33fc317cec7bd7dd41ae7fe78a298ee9a8ba365cd83c0f80bbb7e10ed3c2463f857db164afb508a3a37f3217b3836d7d91cb9c5ebeb48e7b0873048885f3e77a93ee8d0ba5d099a29c5a043336af9eb70406ba08a85e0907eebfa075d1a4822bfaa318711d4602b9a5b7985d80229fc1fbe9c92026ac6cebc26ecce52e0206b9ec93c2222b95570bfef0b56a800dd7b1f6cea0eb9f4429bba05a1bb4c3783421902f0fc2db8aace424dd534e185add4154eb42ffee63c0add0473750e24e82eeb7397d5"}, &(0x7f0000001d80)=0xfc) write$P9_RCREATE(r6, &(0x7f0000001dc0)={0x18, 0x73, 0x12d, {{0x45f81cda295dd5e1, 0x2}, 0xf8c}}, 0x18) r10 = syz_open_dev$vbi(&(0x7f0000001e00)='/dev/vbi#\x00', 0x2, 0x2) r11 = eventfd2(0x7, 0x1) ioctl$LOOP_SET_FD(r10, 0x4c00, r11) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r12, 0x84, 0x73, &(0x7f0000001e40)={r9, 0x7, 0x30, 0x4, 0x7fff}, &(0x7f0000001e80)=0x18) [ 195.111209][ T8456] chnl_net:caif_netlink_parms(): no params data found [ 195.127041][ T8457] chnl_net:caif_netlink_parms(): no params data found [ 195.225995][ T8456] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.249403][ T8456] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.257580][ T8456] device bridge_slave_0 entered promiscuous mode [ 195.272348][ T8456] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.289372][ T8456] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.297269][ T8456] device bridge_slave_1 entered promiscuous mode [ 195.298880][ T8461] IPVS: ftp: loaded support on port[0] = 21 [ 195.317593][ T8457] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.325243][ T8457] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.335625][ T8457] device bridge_slave_0 entered promiscuous mode [ 195.364524][ T8457] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.372424][ T8457] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.380938][ T8457] device bridge_slave_1 entered promiscuous mode [ 195.389850][ T8456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link 14:50:17 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x109001, 0x0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000040)=0x1) getpeername(0xffffffffffffffff, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x80) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x2, 0x1, 0x0, 0x1}, 0x38, 0x1, 0x0, 0x0, "569f7b9530b51a9685973b773e5667c61604c114451dabbd8bd016c62b7d641bcef1d7b35b42a94fe2ec06a7a68f98e0bf192a0a39d0339895fd5f6e9ba40c0d"}, 0x48}, 0x1, 0x0, 0x0, 0x4080010}, 0x2040420) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000280)=""/17) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0x20000, 0x0) r2 = socket$key(0xf, 0x3, 0x2) ioctl$sock_netdev_private(r2, 0x89f9, &(0x7f0000000300)="f55ffd7483f41a2a16ce131bfe149082dcfce2107f89c16bc28e709963831a0a13e6222c7fda19dda05c71cc115cff57ab47744dfda769adb7aa48193bea850e882658ef5779207c7cc20fde49b8350fd5ac27c37a80f390d45d968ba3cb4a5d021a4adec5e6d8c7dc3d3e9e11f03655da06bde93a33488a68af48f1b1b010d831fffbcf1ff994d35379e9230e15b5ecdd55588fbfda580428016ae862aa36cc4435c7e9382ddbfc7be1cf9524230da59fe964354256a8e7be0192f563") r3 = syz_open_dev$sndpcmp(&(0x7f00000003c0)='/dev/snd/pcmC#D#p\x00', 0x6, 0x1) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000000400)={'team0\x00', 0x4}) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0x52d000, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r4, 0x8818564c, &(0x7f0000000480)) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/null\x00', 0x2, 0x0) ioctl$PPPIOCGIDLE(r5, 0x8010743f, &(0x7f0000000d00)) r6 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$setownex(r5, 0xf, &(0x7f0000000d40)={0x3, r6}) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/dlm-control\x00', 0x43d591d4bf63bbc0, 0x0) ioctl$KDGKBMODE(r7, 0x4b44, &(0x7f0000000dc0)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000e00)=0x4) r8 = syz_open_dev$dspn(&(0x7f0000000e40)='/dev/dsp#\x00', 0xffffffff, 0x101000) setsockopt$CAIFSO_REQ_PARAM(r8, 0x116, 0x80, &(0x7f0000000e80)="781d7555356902d937883e9adad2835a889122fa0ce1c8329efbf7a7ee1fe039a2fc62cd4aa25c353f1fd9d3a5ee97cc384ecc0987798cb45e25fe4c8cc1e9dbfd6095f0ccc2d6354ecce144de2eb4a428a0c8c2ae251a12b7a438faff8b6e1cf25656db3698ff7be8ecd62d26bc52a4b0f36501a40f5d582e727d6cddb3210e0ebe68f69fb8fac4983bd9852a41bff481520e115c0ac9533ce1d2b307d5dbb5fcaf64", 0xa3) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000f40)={{0x0, 0x1, 0x4, 0x3, 0x9}, 0xcea5, 0xff, 0x81}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000fc0)={0x0, 0xffff}, &(0x7f0000001000)=0x8) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001040)='/proc/capi/capi20ncci\x00', 0x400000, 0x0) r10 = syz_open_dev$radio(&(0x7f0000001080)='/dev/radio#\x00', 0x3, 0x2) ioctl$KVM_INTERRUPT(r10, 0x4004ae86, &(0x7f00000010c0)=0xfffffffd) socket$inet_dccp(0x2, 0x6, 0x0) r11 = dup(r0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r11, 0x84, 0x79, &(0x7f0000001100)={r9, 0x9, 0x8000}, 0x8) r12 = syz_open_dev$ndb(&(0x7f0000001140)='/dev/nbd#\x00', 0x0, 0x800100) ioctl$BLKBSZGET(r12, 0x80081270, &(0x7f0000001180)) [ 195.431976][ T8456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.458316][ T8457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.494598][ T8457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.512024][ T8456] team0: Port device team_slave_0 added [ 195.538061][ T8456] team0: Port device team_slave_1 added [ 195.622927][ T8456] device hsr_slave_0 entered promiscuous mode [ 195.645570][ T8463] IPVS: ftp: loaded support on port[0] = 21 14:50:17 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x3, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000040)=0x7773) epoll_pwait(r0, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0x7, &(0x7f00000000c0)={0x4}, 0x8) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x122) setsockopt$inet_int(r1, 0x0, 0x2f, &(0x7f0000000140)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1c, 0x0, &(0x7f0000000180)=[@decrefs={0x40046307, 0x3}, @enter_looper, @register_looper, @acquire={0x40046305, 0x2}, @register_looper], 0x6, 0x0, &(0x7f00000001c0)="933d04416e19"}) r2 = syz_open_dev$rtc(&(0x7f0000000240)='/dev/rtc#\x00', 0x7, 0x4000) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000280)) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x11}, 0x10) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000340)) r3 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x1, 0x40040) write$P9_RLERRORu(r3, &(0x7f00000003c0)={0x11, 0x7, 0x2, {{0x4, ')em1'}, 0x7fff}}, 0x11) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x7, 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000fee000/0x10000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x10000, 0x2}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000480)=[@in6={0xa, 0x4e22, 0xbffe, @rand_addr="9207fcc89f6ef0879af4649171399f95", 0x9}, @in6={0xa, 0x4e22, 0x8, @remote, 0x3}, @in6={0xa, 0x4e21, 0x8, @rand_addr="b785e92da0735f00550256f5be3bcff9", 0x6}, @in6={0xa, 0x4e22, 0xda, @loopback, 0x1}], 0x70) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000500)={0xb, {0x5, 0x8, 0x3, 0xff}}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='io.stat\x00', 0x0, 0x0) ioctl$BLKDISCARD(r5, 0x1277, &(0x7f0000000580)=0x2045d7ba) r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x900802, 0x100) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000600)={0xe, @pix={0x3, 0x8001, 0x33524742, 0x0, 0x2, 0x4, 0xb, 0x1f, 0x1, 0xe147f1a7f9a0ee6, 0x1, 0x5}}) r7 = dup(0xffffffffffffffff) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x1) r8 = syz_open_dev$mouse(&(0x7f0000000700)='/dev/input/mouse#\x00', 0x4, 0xd3c54ea12cb7a19f) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000740)={0xffffffffffffffff}, 0x1, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r8, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x1, {0x24e, 0x80000000, "bcda2ab4f8c20c12d1ec46823915be3f1735f7affea97849c0515944ff8c66e6beee5c3e478733a3f26fdbfa526a87f7dfe6a33d696b230ce8cbd0f278f2f6889f64b6e7e595262a3dd5566533feb53ebba8cb86a580f166d693cfd79bf281fd4d1dc5f388fe93225fb8e45f60085f40d577d94046ee2f0989cd91706a9cebef5f928157551a543474829b4faa293e449af5fdcf89f5b1b1ccaf81148c84f229061f77820fdef962e05b4067ce5934f2f21fa768bdc12f5ddea60ac1db0662308256f31eeb3e060ba253173f582bc88425f024d5791c397c32ff55612f87140780efbe198875dc98ca3c6fcfdda5caeedb9cc858a3cb146fc0725d10671aeb5f", 0xf5, 0xcc, 0x80, 0xa1, 0x7, 0xc6, 0x4, 0x1}, r9}}, 0x128) r10 = syz_open_dev$audion(&(0x7f0000000900)='/dev/audio#\x00', 0x6, 0x10300) ioctl$EVIOCGABS0(r10, 0x80184540, &(0x7f0000000940)=""/93) r11 = getpgid(0x0) r12 = syz_open_dev$vcsn(&(0x7f0000000a80)='/dev/vcs#\x00', 0x8cd8, 0x8000) perf_event_open(&(0x7f0000000a00)={0x7, 0x70, 0x3f, 0x0, 0x75, 0x81, 0x0, 0xcc7, 0x8000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8c3, 0x2, @perf_bp={&(0x7f00000009c0), 0x2}, 0x2093, 0x6, 0x1f, 0x1, 0x5, 0x401}, r11, 0xc, r12, 0x1) [ 195.692891][ T8456] device hsr_slave_1 entered promiscuous mode [ 195.760845][ T8457] team0: Port device team_slave_0 added [ 195.775778][ T8457] team0: Port device team_slave_1 added [ 195.873413][ T8456] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.880888][ T8456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.888745][ T8456] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.895871][ T8456] bridge0: port 1(bridge_slave_0) entered forwarding state 14:50:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xe4001, 0x4) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, r1, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x24}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x94}, 0x1, 0x0, 0x0, 0x80000}, 0x800) r2 = syz_open_dev$cec(&(0x7f0000000280)='/dev/cec#\x00', 0x0, 0x2) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f00000002c0)={0x61a7, 0x80, 0x8, 0x2, 0xfffffff9}) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000300)=@v2={0x2, @adiantum, 0x0, [], "49da6dd8344763838e69bab6d93c61fa"}) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000340)={0x9e66, 0x5, 0x0, 0x4, 0x8, [{0x0, 0xfffffffffffffffd, 0x7, 0x0, 0x0, 0xc3aee0e799edde45}, {0x664, 0x5, 0x73, 0x0, 0x0, 0x800}, {0x4, 0x2, 0x8, 0x0, 0x0, 0x2000}, {0x8001, 0xfff, 0x401, 0x0, 0x0, 0x80}, {0x2, 0x5, 0x40, 0x0, 0x0, 0xd02}, {0x9, 0x7fff, 0x7, 0x0, 0x0, 0x80}, {0xfffffffffffffffe, 0x2, 0x7, 0x0, 0x0, 0x400}, {0x7, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x1}]}) r4 = socket$inet(0x2, 0x4, 0x7) dup(r4) r5 = accept4(r3, &(0x7f00000005c0)=@un=@abs, &(0x7f0000000640)=0x80, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000680)=[@in6={0xa, 0x4e21, 0x0, @remote, 0x2}, @in6={0xa, 0x4e23, 0x81, @remote, 0x9}, @in6={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7ff}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e24, 0x7fffffff, @rand_addr="80e77baa02f4b6bc19115eeb0d718b9c", 0xdd}, @in={0x2, 0x4e20, @multicast2}], 0x90) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x210800}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x74, r6, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x33c4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xa1dd}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x40}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x8000) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, &(0x7f00000008c0)={0x2000}) r7 = dup2(r4, r4) ioctl$KVM_GET_TSC_KHZ(r7, 0xaea3) r8 = syz_open_dev$vcsn(&(0x7f0000000900)='/dev/vcs#\x00', 0x7, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r8, 0xc0945662, &(0x7f0000000940)={0x4ca99371, 0x0, [], {0x94fa6639cf64f451, @reserved}}) syz_open_dev$usbfs(&(0x7f0000000a00)='/dev/bus/usb/00#/00#\x00', 0xff, 0x2) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r9, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbff, 0x40000000}, 0xc) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/cachefiles\x00', 0x121000, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000ac0)={0x1, 0x6, 0x1, 0x7, 0xe, 0x2, 0x9, 0x8, 0x3a, 0x2, 0x4a1, 0x4}) r10 = fanotify_init(0x19, 0x80000) fcntl$getflags(r10, 0x40a) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000b00)) r11 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000b40)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r11, 0x0, 0x48c, &(0x7f0000000b80)={0x3, 'rose0\x00'}, 0x18) [ 195.948667][ T8461] chnl_net:caif_netlink_parms(): no params data found [ 195.966660][ T8467] IPVS: ftp: loaded support on port[0] = 21 [ 196.074662][ T8469] IPVS: ftp: loaded support on port[0] = 21 [ 196.082791][ T8457] device hsr_slave_0 entered promiscuous mode [ 196.149697][ T8457] device hsr_slave_1 entered promiscuous mode [ 196.209462][ T8457] debugfs: Directory 'hsr0' with parent '/' already present! [ 196.234900][ T2668] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.244075][ T2668] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.290726][ T8461] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.297892][ T8461] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.305590][ T8461] device bridge_slave_0 entered promiscuous mode [ 196.315018][ T8461] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.322177][ T8461] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.330308][ T8461] device bridge_slave_1 entered promiscuous mode [ 196.417643][ T8463] chnl_net:caif_netlink_parms(): no params data found [ 196.428923][ T8461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.440098][ T8461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.473120][ T8461] team0: Port device team_slave_0 added [ 196.497776][ T8461] team0: Port device team_slave_1 added [ 196.569136][ T8463] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.579682][ T8463] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.587248][ T8463] device bridge_slave_0 entered promiscuous mode [ 196.597799][ T8463] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.605254][ T8463] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.613037][ T8463] device bridge_slave_1 entered promiscuous mode [ 196.630655][ T8469] chnl_net:caif_netlink_parms(): no params data found [ 196.742260][ T8461] device hsr_slave_0 entered promiscuous mode [ 196.801736][ T8461] device hsr_slave_1 entered promiscuous mode [ 196.859392][ T8461] debugfs: Directory 'hsr0' with parent '/' already present! [ 196.886075][ T8463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.899693][ T8456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.917786][ T8463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.933318][ T8467] chnl_net:caif_netlink_parms(): no params data found [ 196.961288][ T8463] team0: Port device team_slave_0 added [ 196.974976][ T8469] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.982497][ T8469] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.990776][ T8469] device bridge_slave_0 entered promiscuous mode [ 196.999567][ T8469] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.006634][ T8469] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.014711][ T8469] device bridge_slave_1 entered promiscuous mode [ 197.023596][ T8463] team0: Port device team_slave_1 added [ 197.034527][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.045102][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.077230][ T8467] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.087097][ T8467] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.095956][ T8467] device bridge_slave_0 entered promiscuous mode [ 197.104132][ T8467] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.111580][ T8467] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.119161][ T8467] device bridge_slave_1 entered promiscuous mode [ 197.135138][ T8469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.146965][ T8456] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.174245][ T8469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.262256][ T8463] device hsr_slave_0 entered promiscuous mode [ 197.299637][ T8463] device hsr_slave_1 entered promiscuous mode [ 197.339375][ T8463] debugfs: Directory 'hsr0' with parent '/' already present! [ 197.348291][ T8467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.364262][ T8467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.380295][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.389156][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.398076][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.405351][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.421627][ T8469] team0: Port device team_slave_0 added [ 197.441512][ T8457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.451590][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.461701][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.470670][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.477714][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.485400][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.495247][ T8469] team0: Port device team_slave_1 added [ 197.512133][ T8467] team0: Port device team_slave_0 added [ 197.528662][ T8457] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.602331][ T8469] device hsr_slave_0 entered promiscuous mode [ 197.639729][ T8469] device hsr_slave_1 entered promiscuous mode [ 197.689391][ T8469] debugfs: Directory 'hsr0' with parent '/' already present! [ 197.698783][ T8467] team0: Port device team_slave_1 added [ 197.714214][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.722290][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.802800][ T8467] device hsr_slave_0 entered promiscuous mode [ 197.849562][ T8467] device hsr_slave_1 entered promiscuous mode [ 197.929422][ T8467] debugfs: Directory 'hsr0' with parent '/' already present! [ 197.937278][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.946371][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.955166][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.963569][ T3010] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.970664][ T3010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.978520][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.987096][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.995369][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.004004][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.012493][ T3010] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.019588][ T3010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.027080][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.035620][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.043886][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.052604][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.061228][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.069977][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.078409][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.086471][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.122735][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.131265][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.143864][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.152570][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.161113][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.169432][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.178029][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.191661][ T8457] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.203589][ T8457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 198.219600][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.227905][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.240883][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.250329][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.262012][ T8456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 198.321290][ T8461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.335583][ T8456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.348089][ T8463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.374930][ T8457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.393979][ T8461] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.404948][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.413482][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.421452][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.431562][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.440141][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.447174][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.456920][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.481181][ T8469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.500640][ T8469] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.526325][ T8463] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.551485][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.560006][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.567958][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.576323][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.585762][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.594788][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.603975][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.611092][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.618800][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.638926][ T8467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.662094][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.682867][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.703748][ T8471] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.710898][ T8471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.726232][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 14:50:20 executing program 1: syz_emit_ethernet(0x7a, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)) [ 198.735069][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.744018][ T8471] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.751136][ T8471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.760268][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.768967][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 14:50:20 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) dup3(r4, r2, 0x0) write$P9_RATTACH(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000000)={0x4, [0x8, 0x3, 0xf9, 0x4]}, 0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) sendto(r1, &(0x7f0000001140)="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", 0xfc1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@link_local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223}, @local}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x8, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local}}}}}}, 0x0) [ 198.799889][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.808398][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.817627][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.827593][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.836690][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.845530][ T8471] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.852629][ T8471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.869727][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.878428][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.887231][ T8471] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.895210][ T8471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.922919][ T8467] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.944334][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.956020][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 198.964709][ T8485] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 198.984939][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.998927][ T8489] QAT: Invalid ioctl [ 199.003827][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.012927][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.021410][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.030608][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.039498][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.047706][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.056165][ T8491] QAT: Invalid ioctl [ 199.056299][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.068582][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.077132][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.085168][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.105728][ T8461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.114356][ T8489] QAT: Invalid ioctl [ 199.128004][ T8463] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 199.144562][ T8463] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.156700][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.166225][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 14:50:21 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) dup3(r4, r2, 0x0) write$P9_RATTACH(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000000)={0x4, [0x8, 0x3, 0xf9, 0x4]}, 0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) sendto(r1, &(0x7f0000001140)="130ce1df81faf91d959acd0064d4b8579ba48ecf96721b9005eb4f2b55d0df0b7d378bb7f6c9638465c75377cb1b061654d468277f7b7ee6c8ae6150d5580a8f700c70117bdba870d0aa337f6809398ea766d1ad3937f97d719a11ba604e3f5a357ad739498a99e107ced8feab5ba63793687709bf858b2e638d102860e8acd6257f32acf6927bf49f82da6c658f6556a7c65e175ac11538659ae36fbbc08a0dc7002762468bc772a6f8d790640b3e35c22535f6a3edf2d18d28ef1aad1a409693215ba2aed1ce946180268239d0ed635a62b7e6cd229a97830b8ee91f246b36e01f5c8345d812f8f9ccba4994e6e17239fe4ea8bb3a4905845372ea03fceebd36f4cf6c5832f31c93168684114c91fdeb07b4d7b5cac60f0fb2a010bf5d22babfd0c3c192dc5b9bac8d2791f6ca0043d30a0bb59f100d19e31f62c1e235466086c97ad29da831c04281126f44053bd53790d31ebc9f61288384296c28a320d7c157fecef74d4caa8bb7b22156e27cf1173ff266fee889b05b432aa4d9d36d5fe01fcbdf5dc1f8e688ad2bff1a57b7e944e8af1357cd5bb843444c160c6a39c69a56a726e9f306748559f58c436c7d60b5671728c27471a96b08d6d98dacc5b25119eb57f5fea48a55d30738caec7b303ba1f589e50b63dc73e1117e3044e290c37503c63215701fe1052c8059a649f3113487318db48b8b8b45a3c671b21920c8be45529b2d97b3d7b914b0ddc0b905c9d2f21325dd50d6ddba2abf69671d996a530dc5a7e49388c352141592a2de6982e7726a1f633176b978f4b945c8ee6827f7257f1a07bba0442fcfec478d9b948e0bafea5c7fa08783eca04e3eb8834ee219705419b5bcf6c250848d41e1fbbb7c5026944112dd5295dbe208f135edfa29a2f6e82f616def78aebaf5c0dfe9c13449474b5bdba8c195e9fe015725e628f5b4fa2aef003d2b6277c3b51f46f9e12c6c03e05ee270770f961355db83c7b2da8da161b35b5678784407813434e3581ac822aadd802d081765fc682176c2a0af6e4eeb1c60ff025f4e4d760e959b8956218c5d87474dd5bac574e741e4b410f33997cdbd5526328363d507d1afe7dc45fdb5e83f8eff24dbc7d3c2ca1d574c262575a1e5f472b156033c648f56ca77fc213adae7427c1694513b3439fdd9bf88de6bb743325c2a4273c2899f273b276776a0e0ba640d40f4b619d3e9354bd1885d77081c4f9c339e0a71b19bcfb66e5696f0251fdfc5cca9636144eb639bba8c3f12b8719dad89e0bd6dd9d3f279c105345796f93c7a510fdb709d2a063f6f8aae1be5f38c9cea42a758420693fa1eb9c8d3b6ca5128c1af8be4ec593f1ebb382a3afa2dab8cfc2fc1b869385775def2ccf39f4a3c0cb1bba2e9e055a293c478e6a77f6cd567b5b6426416bfd96007895e81a5b978194247ac645ae0475b36e0fd4876518dbbd32eaf51b854be4469780b6159422eff923a5a3d62b4976239f53155aae7e41854f7e2009eae464e92ee1caf5aac48d1e59267816da871e68dec00e76cf057615d1bc0d295da83f1eaf40f10f86bcebde86fe53a333bb94703e6acc83c0e5117e4f90867f794a23b14a37b719de56d2679edc8c9da18b86920c2635b970ab268881ebe79f3e6cacd1da1feaa321ca2136702d476b3a2c15ba1b92ab4729eb5ddbf80dec7b72bc59ace7a3a987765941320d6e2f696fb89e2dd37291dec6c8648eb11341925cd54fb9a0b5ebf7b0d0bfe22d812c9aa9f26529e80e9b52201b82b84607697aac03e63c80dbf32025b1596fd9fb444bc3ba60156bb838971a6f6a37cba0b6184a0da2987a2e3dea758c105ca6a41042c3c1b711ff6196d14b498a777d642dc729797ef7d0218dc322b14ed30baf34a211570e6fd013c08cbbbab4b3033e0de8f0243fb3caf795d6eb43d2c1b2290a713798e94e5248bddcd4e9201414c45ed0ce323958d019b9408ca0d75f2abcdcb3114ebef6239181c5691571e7d7c2a2d5830e3306542fd3e42da86c9fcd959f2b2f1bf8955fc0cb5ed6478cc55dbc45e16dadde9c217590a6ed6abf6d1759ab2b0ed7697232cf242b5c701c7b12a47949166b1f73873274f3ccc3153f14f73780489690e87da1e173118bb95dee045ec9d9c19e757d3d880ae5f7c093a5fd013c2b000aeed7729a4258ef8ffd9a4f7f64a4f36c4bb1e8f3a53c2ceb753079ff7bac4bf9561b2ddde0c52e4be348c22ab3c84b1f963ebe9b9b751c14a6319c02231142a5c6763a997480792caa3731f0a0afa7578705c82e2c143d4ee93dd983abfd75e7adb3af7efaefc6f115bca7448fcd2bef70cf085e41ffc4d243c9b89a8a1a3455d8bbe56457cede3626dd4ac6c7977627edd7ee872c99f633db0e4fe97d5ca16701c65296a2e9a3be4e5bcacefcc36e2aa7d650c0521bb22613c3b15f89acf21e1cf6ee09519bfed8ff0dadc914653288a3a9f9d8f2822ee7ab57af322ad49cfd2ba9ccfbf59ee34b971afc8675ecf5687b085845034d32b2297b357f88e5ef7baa082874b1e643c3b891927883e884bcf29280fa009b9a218d6bc9b8ef1d43113fce43c7ba6da0abac98721c4c50fc05aa1c07158ec175007974655cc4a63d7507a4ca00cba707d45aad9b16ae37077f3692796acf35d9d906a58b7dc45b0fccb33f3e5f488b8e750a99e3e1cdb9900e51cbf189e4870013a7b9ccfa1851843dded265e9a99b8a3c4fb7e77fb3f3993c25fa39a887190db141c611fcd81ea5e607f1a87b42d75eb947190c28e9a19c5522096c3981e6cc757077564c0685bcac7ce0943da53b3bd63ad812821dcbd64afe26a03e9602635df3bbda50ea632428ac453bcf42180406bf7dfa74c5290793514b7da1299e0b73193cba17a581e58ac84bd3b71b5aca080fd5c116dd36c47b9d2fa8df521ca5a0eb123ccd875b41f6ffb1b6bc5680a8154431e502cf4a3cc6a8624337847d72dfc093dff264e2f1e4734c0d8a370a8ac2fe7dc32f269634a2e2353cc4f6b3779b7a57bed731be41e656a92cbbb3beb5d7634624e022c7b75b7eac32e39b657703a584896f9e19a2e6298fa9e24f12d2f36c69d470c253711a7c9d7df15eb5a0207ddbba1a9106a96fb26093ae38f035b7f873c6b2ac8f762cebc02fd49f802637e710acb8165f893a08c178672948e7d22227bbe61922752d7b854ed62d6a0d7f9ff3629cac4211af06d39b07fd64488a2b4e72a1f8608b02009adc6859485bdf150f6767d166801969b3e2109acd5c49ced3fba6eb13bc8d61291c25c2dd70edcbb1355ab3cf44d1728b290a6b50f594ae88db5122b9e3f5a0f99ab93e8568536ce3640fe76c476860655e48d667b919fabd1a45ef5a5b6cecdb9100c779ccb44e23ed5c151601eebb1ab9eebb4a87203d1cc032bfc67b3488d7a33d475dd033432cff040d65e8e729c263ed414c11139c2790c5b09a1f4d0220a528b3c4134c67c1c6a926ffc888cf46ae3998569a0ace18e268419875d0022bcb52e412d93c5d73f18b0dbc4c296c2a2f68501e0520c1db027a61b66deb060a5b6cee396c8f9bff11c4379d60440fd16ee871a7a65d2777732680458e47a9308c1210fb158a503d4b5ab09e468303a9162f3fa80192f8212841096dbbb212d5ed63f76732dcb12520022c97b0397df556b160feb3bbb5de4343169a1a430812b9bf0cdeaef95088d9c5b446d2804adcb8dcd1329c17d167682928feff98a3de1677e6d1ead246a4d4cfc7d4d513b8c092bc6b8171dc9a1f3aba82d991af0e63ea0bfb50fb723279da478e01bd7ae64f93f9cdff631465283fce5e4a3c81596d09f86ac42bd1b76c2a05b8a27e82990faadc333e9711ba3af0fd3f6ba2babdfc1ba4fd0ff214527ce02416838edc792ed78f1199fa4c8272642442c507cad59f0dcaddd711bab55b3aa08414ac976aaffc9a7fb12cc8f9607fe417b8b7dcd18dc2cdae11c82428e182043d29a530b83ceec51256b30e0e16ffe7da26cb3253237da5af65efe8a394d94ea092a7c4839b4d16acdf3964f47d0b4924a1c52bcebcdb742b7e7e43af287aff9538492116931aa7235558da37d32ac2263f58e32b173502252d11a11738cf399fb908694c85eea145332bb9b6424bcfd38462464cc4f65599dc7f4d9dcf69fe89d7ab043a376e556ce0f599fb1dcb0cf162076e6470f8c27f3642d007d938172a95a29ce6a7a5d05023ee169ec1a21950041f5b6e2a1062460fe2d53597870603414a5dd577dac6ef84302f2112bfafea91b807b41c6c2edce1cd3d698186618a3bbc218d498c5f06eefabdd25610eb3a9351aeb80fd8a05e930d949ac01996e3e03177137fb76b24382c963d1b59d39cb2f9a75c739fc2d7fb930081ffa20da42650376c729bddc3b496a1c3b61f4af51e7dbddedef82b40196ec554163142d694e5c50d2da54d2bd1cba5bb125efb45137fe251a2b52ba248dfb917833deb607cc25c8c314674ba26b019c24f79d8a74b6b2b3f39e9e608881fecded644785793cdd03b938657544d88252be1127088a41ab316e3e67b240bda5622d4d37f53d3f2424b1d4dc9f50b4e2437600261062a3e566b0d2f8cb24af634bb739179ee3517c82bf0e67bf3c7dc7ce4605219efa4f048b1bf83c627daf672990b5a3db1a80cae4748163a2e40063265a94fd4bbb6bd059e8731e72332c0a22a0c5bd99da925eabe62ec0bdef5a4b7cf8bbd48f286aaff632f14b47b264c7f132d4f60571b8f72d63402a15cd2381582e613f4c2bbe135c67a3d69b4d56f4bfcfe56935f91a5d86dcb7977ec7cd25835c3fa590b8e61c752cffb436ef3f5f4974d268c24fa44281f3067c7825546edc0077b08123bbf258009e6f5da9a1f63beab9e2a7b5f1feec68c4096c541ed0459ea2f791a1ccf8c9d0717b1d5c281375d96d0a7a8c1c53146319b19c08ce612295da709beacb72d69802f72e716bc655d06a9921a1e837adc59ae74cfedf4ac870733750e507b549d1256705873156a4c4e6eebe18aa92a701014e0b71d74e19054185bafb916711f300a956071201e1b9db07a6a6e53a3bd3467920b01495f73dc15abddbd049414ced5220bc1cada5f5691c08a4cd470673df60438ab457d81c2cd3a021f23339f4262ef932a0fa1a70957ae207edd7e7f52c94458af9341921de99126a1406de8366bd80aea016d284f6ade493cf585471a3b2f8b8b9a331fe110c33f2ea1a0abaef34fb31565c8dd62051f3e72631ba81be7aaaa614bd319cde69338e90ceebdcea790a02417312a8b3cf60dffe1ccba3244338391684c49ac9225cb28a416d40b6d3d52a035fd95673917768109435eb004d999a7208eb4d6ef40ed7549c2b4c63fb6fcdfcad382cb7f8b08cc30b6f81369aacdd098415b5ecee7900c4db01e669b38ec9173a7c673d36c3f920b518e6d0a0f90be95577e1e0ec69498b4bea0ecc129dcf14604c3055603e0f57530850b4ad8f9e84ebf4ab16071658a95963feb041def2f2dee88ec007ee20ecd6a7ba57c812f995c754af6de0364dd847c05a139fc771941cd4dfde7874a5c9bfed0c4424acdbfa1d0f8d5986d64e42c68b45bcea645d7fabd505f4177eece9177e4ae505011fb2ae8bef166d7cb1fa83995d5759c8009bd48c170513634deb16aaa2736940d828c5cf524e448747fc7349ca575a3378995ff896038c7101f50c3573bc", 0xfc1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@link_local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223}, @local}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x8, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local}}}}}}, 0x0) [ 199.175242][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.185713][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.200505][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.209084][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.217663][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 14:50:21 executing program 0: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80, 0x800) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000000c0)=0x90, 0x4) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)={0x8001, 0x2, 0x4, 0x4, {0x0, 0x7530}, {0x2, 0xa, 0x9, 0x4, 0x7, 0x0, "7accd097"}, 0x4, 0x3, @userptr=0x800, 0x4}) r2 = request_key(&(0x7f00000001c0)='trusted\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='self\x00', 0xfffffffffffffff8) keyctl$invalidate(0x15, r2) r3 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)="1cb9abe53d2520999e60bca36962a115133dd560d58495ff55e448d6ef87304bf101aa5606ec259afc054e3a007ff7e025a5c471278deb1046cd7cbbee2ccdb6cf33c130f12b2bdb86ff1fc34618d62ebe4806ea33f7f4af0ee42b0331adf2fce91a8ab913c6f68949f46a8865d1b8af4ed218731cd91bdf7e6cbd7fe15e7f5a13ed90effc0c41589113c59cc6a772c3b93d1adf0ea8e356bd5188d2c9c63aba18132432546c24f8575aeac4a2ea9a413bc25f7313a2dccf75", 0xb9, r3) r4 = msgget$private(0x0, 0x100) msgsnd(r4, &(0x7f0000000440)={0x3ba0028853d7a770, "01dbbd286a44dd16426205734832444536c45c6e9212bc29b3f9d763f60844e951d75040c86926ee39ee2fa46794ebf694f604c26c0e6068ca4912ee0f3b44107a972677db4651730cf2622922a4ebb4d28e53590b55fd91f17e46e86d6e89a481b4d637495b38b3da64b5b9e4eac77f129226d69c605cde5876a0e0a354d33a10b14c95f84f4e0ced2a42d530fdb0f276baa43b0baee480"}, 0xa0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r1, 0x0, 0x8, &(0x7f0000000500)='trusted\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000580)={r5}, 0xc) r6 = msgget$private(0x0, 0x4) msgrcv(r6, &(0x7f00000005c0)={0x0, ""/218}, 0xe2, 0x3, 0x5400) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/dlm-control\x00', 0x10801, 0x0) ioctl$EVIOCSABS0(r7, 0x401845c0, &(0x7f0000000700)={0x1, 0x80000001, 0x4, 0x0, 0x8001}) r8 = syz_open_dev$audion(&(0x7f0000000740)='/dev/audio#\x00', 0xdf68, 0x519dfa3c9ced9e74) ioctl$KDSETLED(r8, 0x4b32, 0x8001) r9 = msgget$private(0x0, 0x10) msgctl$MSG_STAT(r9, 0xb, &(0x7f0000000780)=""/232) socketpair(0xf3317e352b25385, 0x2, 0x1, &(0x7f0000000880)={0xffffffffffffffff}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000980)={@multicast2, @remote, 0x0}, &(0x7f00000009c0)=0xc) bind$xdp(r10, &(0x7f0000000a00)={0x2c, 0x7, r11}, 0x10) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000a40)) r12 = syz_open_dev$mice(&(0x7f0000000a80)='/dev/input/mice\x00', 0x0, 0x4000) getsockopt$inet_int(r12, 0x0, 0x13, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000b40)=0x7fffffff, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000b80)=0x7fffffff, 0x4) rt_sigprocmask(0x0, &(0x7f0000000bc0)={0x4}, &(0x7f0000000c00), 0x8) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) [ 199.237232][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.269845][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.278608][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.293691][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.302895][ T8498] QAT: Invalid ioctl [ 199.309453][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.317755][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.326126][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.334836][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.343306][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.353879][ T8469] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.367113][ T8500] QAT: Invalid ioctl [ 199.376009][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 14:50:21 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r3, 0x4000000000000002) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) read$char_usb(r2, &(0x7f00000002c0)=""/78, 0x4e) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=@fragment, 0x8) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001840), 0x0) connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 199.390027][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.397944][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.406474][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.417663][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.426380][ T3010] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.433511][ T3010] bridge0: port 1(bridge_slave_0) entered forwarding state 14:50:21 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = getpgrp(0x0) setpriority(0x0, r0, 0x10ffff) r1 = getpgrp(0x0) setpriority(0x0, r1, 0x10ffff) capset(&(0x7f0000000040)={0x20080522, r1}, &(0x7f0000000080)={0x0, 0x2, 0xdc13}) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) r5 = getpgrp(0x0) setpriority(0x0, r5, 0x10ffff) syz_open_procfs(r5, &(0x7f00000000c0)='net/wireless\x00') ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x800, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffff8}) r6 = syz_open_pts(r4, 0x4000000000000002) r7 = dup3(r6, r3, 0x0) ioctl$TCXONC(r7, 0x540a, 0x0) getsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000000), 0x2) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a001100017460fe0012ff000000078a151f75080039000500", 0x100000052) [ 199.457366][ T8463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.479654][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.487707][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.520958][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.545356][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.552509][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.580295][ C1] hrtimer: interrupt took 27090 ns [ 199.613198][ T8469] 8021q: adding VLAN 0 to HW filter on device batadv0 14:50:21 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedV\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) lseek(r1, 0x203ffffd, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357) socket$unix(0x1, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect(r1, &(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x1, 0x1, 0x4, {0xa, 0x4e20, 0xef, @rand_addr="1c58300b4cfb5eed03bccb2e114b96bd", 0x8}}}, 0x80) connect(0xffffffffffffffff, 0x0, 0x0) gettid() r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_tables_names\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00003b9fdc)) r7 = syz_open_pts(r6, 0xc080) dup3(r7, r5, 0x0) write$P9_RATTACH(r5, 0x0, 0x0) ioctl$BLKROSET(r5, 0x125d, &(0x7f0000000380)=0xff) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r8 = syz_open_pts(r4, 0x4000000000000002) dup3(r8, r3, 0x0) write$P9_RATTACH(r3, 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f00000000c0)={0x95, ""/149}) sched_getparam(0x0, &(0x7f0000000000)) [ 199.659435][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.683665][ T8461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.720831][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.761334][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.779029][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.806832][ T8467] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 199.818445][ T8467] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 14:50:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) write$P9_RATTACH(r1, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x1bc, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xa0, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xb0, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa7e2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd3ab}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x23, 0x847, 0x0, 0x0, {0x2804, 0x0, 0x4f290200}, [@nested={0x4, 0xf}]}, 0x18}}, 0x0) [ 199.856616][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.882873][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.927950][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.969093][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.007687][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.029514][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.041836][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.094010][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 200.131732][ T8467] 8021q: adding VLAN 0 to HW filter on device batadv0 14:50:23 executing program 5: open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x24c5c3, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@generic={0x3, 0x80, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x80000, 0x0) mount(&(0x7f0000000140), &(0x7f0000000180)='.', 0x0, 0x2802008, 0x0) 14:50:23 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) write$P9_RATTACH(r1, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000000)=""/35, 0x23, 0x10021, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r4 = socket(0x400000000000010, 0x802, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") write(r4, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0xf, &(0x7f0000000240)={0x0, {{0x2, 0x0, @multicast1}}}, 0x90) 14:50:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getegid() setfsgid(r0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) time(0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) dup3(r4, r2, 0x0) dup(r4) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r5 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x800000000004e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r5, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) write$P9_RFLUSH(r5, &(0x7f00000001c0)={0x7d6a591eedaef62b}, 0xfffffe36) 14:50:23 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f0000000000)={0x9, 0x7, 0xd84, 0x5, 0xfffffffffffffffa, 0x10001, 0x401, 0x81}, &(0x7f0000000040)={0x2, 0x10001, 0x809, 0x1, 0x4, 0x7, 0x400, 0xfff}, &(0x7f0000000080)={0x80000000, 0x401, 0x6, 0x0, 0x1, 0x0, 0x2, 0xffffffffffffffff}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={0x7f}, 0x8}) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x101000, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x2) 14:50:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x8) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002000290f00000000009b5540bfa58b0c2d0000000000000000005000db8d0d4215dbd494783a16ef6e77bb78d7459282f89308d7d34af151fb36532a37b0ef9c99ed2aea1a1b3ef366dd661c16c4d4d8df1b4741507faeaafe588bceaee8019913d12dd2b294e6952a533e6b47841801873130f6ee16c9267c988e"], 0x20}}, 0x0) 14:50:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedV\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) lseek(r1, 0x203ffffd, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf}, 0x20000357) socket$unix(0x1, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect(r1, &(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x1, 0x1, 0x4, {0xa, 0x4e20, 0xef, @rand_addr="1c58300b4cfb5eed03bccb2e114b96bd", 0x8}}}, 0x80) connect(0xffffffffffffffff, 0x0, 0x0) gettid() r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_tables_names\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00003b9fdc)) r7 = syz_open_pts(r6, 0xc080) dup3(r7, r5, 0x0) write$P9_RATTACH(r5, 0x0, 0x0) ioctl$BLKROSET(r5, 0x125d, &(0x7f0000000380)=0xff) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r8 = syz_open_pts(r4, 0x4000000000000002) dup3(r8, r3, 0x0) write$P9_RATTACH(r3, 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f00000000c0)={0x95, ""/149}) sched_getparam(0x0, &(0x7f0000000000)) 14:50:23 executing program 5: open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x24c5c3, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@generic={0x3, 0x80, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x80000, 0x0) mount(&(0x7f0000000140), &(0x7f0000000180)='.', 0x0, 0x2802008, 0x0) 14:50:23 executing program 4: syz_emit_ethernet(0x7a, &(0x7f0000000100)={@random="8d40420d297d", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '5&h', 0x44, 0x2f, 0x0, @local={0xfe, 0x80, [0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000]}, @local, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x8400, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) r4 = dup3(r3, r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000000), &(0x7f0000000040)=0x4) 14:50:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1ff, 0x0) ioctl(r0, 0xffffffffffffffb6, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) write$P9_RATTACH(r1, 0x0, 0x0) readahead(r2, 0x800000, 0x9) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x8) 14:50:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r4}}, 0x18) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00003b9fdc)) r7 = syz_open_pts(r6, 0x4000000000000002) dup3(r7, r5, 0x0) write$P9_RATTACH(r5, 0x0, 0x0) ioctl$PPPIOCCONNECT(r5, 0x4004743a, &(0x7f0000000040)=0x1) 14:50:23 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)='.\x00\x00\x00>\x00', 0x6}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1}, 0x40002040) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000380)={@remote, r2}, 0x14) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r5 = syz_open_pts(r4, 0x4000000000000002) dup3(r5, r3, 0x0) write$P9_RATTACH(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x5, &(0x7f0000000340)=@raw=[@call={0x85, 0x0, 0x0, 0x37}, @ldst={0x3, 0x2, 0x2, 0x5, 0xb, 0x2}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1f}], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xb4, &(0x7f00000003c0)=""/180, 0x40f00, 0x2, [], r2, 0x14, r3, 0x8, &(0x7f0000000480)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x9, 0x200, 0x5}, 0x10}, 0x70) r6 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000080)=0x82) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'erspan0\x00', 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8984413869d6e3ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0xfdef) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$PPPIOCGUNIT(r8, 0x80047456, &(0x7f0000000280)) 14:50:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x440c0800}, 0xc) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000480)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000440)={0x101, 0x33424752, 0x2, 0xffffffff, 0x2, @discrete={0x5, 0x200}}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast2, @in=@local}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) r4 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x7, 0x2a00) ioctl$IMGETCOUNT(r4, 0x80044943, &(0x7f0000000080)) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1, {0x9, 0xfffffffd, 0x9, 0x5537}}) msgget$private(0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r2, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(0xffffffffffffffff, 0x80605414, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) [ 202.053550][ T8593] device nr0 entered promiscuous mode 14:50:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1, {0x9, 0xfffffffd, 0x9, 0x5537}}) msgget$private(0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r2, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(0xffffffffffffffff, 0x80605414, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 14:50:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/pid\x00') syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/pid_for_children\x00') perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0xfa, 0x4, 0x8, 0x40, 0x0, 0x5, 0x40, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9f8, 0x2}, 0x1000, 0x5, 0x3, 0x7, 0x5, 0x40, 0x8}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/pid\x00') syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/pid_for_children\x00') getpgid(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/aut*Sofs\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x12, r2, 0x0) socket$unix(0x1, 0x2, 0x0) rt_sigaction(0x23, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x5b4ed5040c9a3bdf, &(0x7f0000000000)) clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x80000000) sendmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x5c3, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, {0xa, 0x0, 0x0, @local}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r4}}, 0x18) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00003b9fdc)) r7 = syz_open_pts(r6, 0x4000000000000002) dup3(r7, r5, 0x0) write$P9_RATTACH(r5, 0x0, 0x0) ioctl$PPPIOCCONNECT(r5, 0x4004743a, &(0x7f0000000040)=0x1) 14:50:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1, {0x9, 0xfffffffd, 0x9, 0x5537}}) msgget$private(0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r2, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(0xffffffffffffffff, 0x80605414, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 14:50:24 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/pid\x00') syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/pid_for_children\x00') perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0xfa, 0x4, 0x8, 0x40, 0x0, 0x5, 0x40, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9f8, 0x2}, 0x1000, 0x5, 0x3, 0x7, 0x5, 0x40, 0x8}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/pid\x00') syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/pid_for_children\x00') getpgid(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000080)='/dev/aut*Sofs\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x12, r2, 0x0) socket$unix(0x1, 0x2, 0x0) rt_sigaction(0x23, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x5b4ed5040c9a3bdf, &(0x7f0000000000)) clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x80000000) sendmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x5c3, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, {0xa, 0x0, 0x0, @local}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r4}}, 0x18) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f00003b9fdc)) r7 = syz_open_pts(r6, 0x4000000000000002) dup3(r7, r5, 0x0) write$P9_RATTACH(r5, 0x0, 0x0) ioctl$PPPIOCCONNECT(r5, 0x4004743a, &(0x7f0000000040)=0x1) 14:50:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1, {0x9, 0xfffffffd, 0x9, 0x5537}}) msgget$private(0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r2, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(0xffffffffffffffff, 0x80605414, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 14:50:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x200000008002) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) r4 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x400) write$sndseq(r4, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick=0x7, {}, {0x0, 0x2}, @control={0x2, 0x233c5a62, 0xffff}}], 0x30) 14:50:24 executing program 5: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f038b0604000800080006000408ff7e", 0x24}], 0x1}, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x40800, 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000000c0)) 14:50:24 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x440c0800}, 0xc) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000480)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000440)={0x101, 0x33424752, 0x2, 0xffffffff, 0x2, @discrete={0x5, 0x200}}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast2, @in=@local}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) r4 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x7, 0x2a00) ioctl$IMGETCOUNT(r4, 0x80044943, &(0x7f0000000080)) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 203.035316][ T8638] device nr0 entered promiscuous mode 14:50:25 executing program 5: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) r4 = dup3(r3, r1, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000000)=0x6) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0xf00) 14:50:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1, {0x9, 0xfffffffd, 0x9, 0x5537}}) msgget$private(0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r2, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(0xffffffffffffffff, 0x80605414, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 14:50:25 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002080)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000400)={0x2, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000002400)}}], 0x2, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/37, 0x25) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000080)) 14:50:25 executing program 5: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) r4 = dup3(r3, r1, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000000)=0x6) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0xf00) 14:50:25 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004008}, 0x28804) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)) r6 = syz_open_pts(r5, 0x4000000000000002) r7 = dup3(r6, r4, 0x0) ioctl$TCXONC(r7, 0x540a, 0x0) openat$cgroup(r7, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f00003b9fdc)) r9 = syz_open_pts(r8, 0x4000000000000002) r10 = dup3(r9, r3, 0x0) ioctl$TCXONC(r10, 0x540a, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1}, 0x40002040) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000380)={@remote, r11}, 0x14) setsockopt$inet6_IPV6_PKTINFO(r10, 0x29, 0x32, &(0x7f0000000000)={@ipv4={[], [], @broadcast}, r11}, 0x14) 14:50:25 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x440c0800}, 0xc) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000480)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000440)={0x101, 0x33424752, 0x2, 0xffffffff, 0x2, @discrete={0x5, 0x200}}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast2, @in=@local}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) r4 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x7, 0x2a00) ioctl$IMGETCOUNT(r4, 0x80044943, &(0x7f0000000080)) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:25 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="850000002e00f3ff66000000004fdde12df8d9944fccbb123d756f41d843092491ec77494dbf0a50cf8b72924072012e6c2fb0bca4a47f5c76d3f5749341942799f42f790f14acffd4baef6d3fc81bfad94d3ec52df24d3f0651fe9fd58d86594bbc503083a98e8343522046509f2b84056f5f1a7864e4bcf405123b6b7ca1a319c9163d64d31bbb3b3159714e12cb77bce57659444a4174346788284293395ac8b262d17d6cb7664972768c838b6330"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) dup3(r3, r1, 0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000180)={0x0, @adiantum}) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)) r6 = syz_open_pts(r5, 0x4000000000000002) dup3(r6, r4, 0x0) write$P9_RATTACH(r4, 0x0, 0x0) ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f00000000c0)={0x7, 0x6, 0x7, 0xf40, 0x5, 0x26c7}) write$P9_RATTACH(r1, 0x0, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) 14:50:25 executing program 5: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) r4 = dup3(r3, r1, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000000)=0x6) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0xf00) 14:50:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f00000000c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @rand_addr=0x3}}, 0x24) r3 = accept4$tipc(r1, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0x80000) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000280)={'nr0\x00', 0x2}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x3, 0x3}, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)) r6 = syz_open_pts(r5, 0x4000000000000002) r7 = dup3(r6, r4, 0x0) ioctl$TCXONC(r7, 0x540a, 0x0) ioctl$SCSI_IOCTL_SYNC(r7, 0x4) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/361], 0x169, 0x4800000000000000}}], 0x1, 0x40) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, "ec"}], 0x18}}], 0x1, 0x0) close(r2) prctl$PR_CAPBSET_DROP(0x18, 0x12) 14:50:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1, {0x9, 0xfffffffd, 0x9, 0x5537}}) msgget$private(0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r2, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(0xffffffffffffffff, 0x80605414, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 14:50:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0xc002, 0x0, 0x0, r4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) munmap(&(0x7f0000ff2000/0x1000)=nil, 0x1000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:50:25 executing program 5: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) r4 = dup3(r3, r1, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000000)=0x6) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0xf00) [ 203.859156][ T8679] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 14:50:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1, {0x9, 0xfffffffd, 0x9, 0x5537}}) msgget$private(0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r2, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(0xffffffffffffffff, 0x80605414, 0x0) 14:50:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='sit0\x00', 0x7) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0xb8) syz_open_procfs(0x0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0xfff6) 14:50:26 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x440c0800}, 0xc) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000480)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000440)={0x101, 0x33424752, 0x2, 0xffffffff, 0x2, @discrete={0x5, 0x200}}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast2, @in=@local}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) r4 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x7, 0x2a00) ioctl$IMGETCOUNT(r4, 0x80044943, &(0x7f0000000080)) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:26 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004008}, 0x28804) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)) r6 = syz_open_pts(r5, 0x4000000000000002) r7 = dup3(r6, r4, 0x0) ioctl$TCXONC(r7, 0x540a, 0x0) openat$cgroup(r7, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f00003b9fdc)) r9 = syz_open_pts(r8, 0x4000000000000002) r10 = dup3(r9, r3, 0x0) ioctl$TCXONC(r10, 0x540a, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1}, 0x40002040) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000380)={@remote, r11}, 0x14) setsockopt$inet6_IPV6_PKTINFO(r10, 0x29, 0x32, &(0x7f0000000000)={@ipv4={[], [], @broadcast}, r11}, 0x14) 14:50:26 executing program 4: r0 = getpgrp(0x0) setpriority(0x0, r0, 0x10ffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x97e, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@remote, @initdev, 0x0}, &(0x7f0000000100)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth0\x00', r3}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) open(0x0, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) setuid(0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x9ac5}, &(0x7f0000000040)=0x8) ftruncate(r5, 0x200004) sendfile(r1, r5, 0x0, 0x80001d00c0d0) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f00003b9fdc)) r8 = syz_open_pts(r7, 0x4000000000000002) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r10, 0x40045431, &(0x7f00003b9fdc)) r11 = syz_open_pts(r10, 0x4000000000000002) r12 = dup3(r11, r9, 0x0) ioctl$TCXONC(r12, 0x540a, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r12, 0x8918, &(0x7f0000000280)={'syz_tun\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) dup3(r8, r6, 0x0) write$P9_RATTACH(r6, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000001c0)={@local, 0x6c, r4}) 14:50:26 executing program 5: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) r4 = dup3(r3, r1, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000000)=0x6) 14:50:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) r3 = perf_event_open(0x0, r2, 0x10, r0, 0x16) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r5 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x1ff) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000440)=0x14) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x6685, &(0x7f0000001500)={0x1, 0x8000, 0x1000, 0x1000, &(0x7f0000000480)="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", 0x72, 0x0, &(0x7f0000001480)="1bfc1f04867a56b24be6701a4b31353b80ac26ad8f56c4248071782c606fd99c43ac4e3aba172d0ad351518b9d75e82273b1fc58767526d066618fa6425d6a3c8cf27a263420b5c79d00e85da3c9431fb3ee931534429b3a3d4ad8e94c4e93f3d25129548be06a11dca40a75ba03df367615"}) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x2000006) 14:50:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1, {0x9, 0xfffffffd, 0x9, 0x5537}}) msgget$private(0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r2, r1, 0x0) 14:50:26 executing program 5: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x4000000000000002) r4 = dup3(r3, r1, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 14:50:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1, {0x9, 0xfffffffd, 0x9, 0x5537}}) msgget$private(0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) 14:50:26 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x440c0800}, 0xc) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000480)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000440)={0x101, 0x33424752, 0x2, 0xffffffff, 0x2, @discrete={0x5, 0x200}}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast2, @in=@local}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x7, 0x2a00) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:26 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r2}]]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004008}, 0x28804) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)) r6 = syz_open_pts(r5, 0x4000000000000002) r7 = dup3(r6, r4, 0x0) ioctl$TCXONC(r7, 0x540a, 0x0) openat$cgroup(r7, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f00003b9fdc)) r9 = syz_open_pts(r8, 0x4000000000000002) r10 = dup3(r9, r3, 0x0) ioctl$TCXONC(r10, 0x540a, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1}, 0x40002040) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000380)={@remote, r11}, 0x14) setsockopt$inet6_IPV6_PKTINFO(r10, 0x29, 0x32, &(0x7f0000000000)={@ipv4={[], [], @broadcast}, r11}, 0x14) 14:50:26 executing program 5: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 14:50:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1, {0x9, 0xfffffffd, 0x9, 0x5537}}) msgget$private(0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) 14:50:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1, {0x9, 0xfffffffd, 0x9, 0x5537}}) msgget$private(0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) 14:50:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x440c0800}, 0xc) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000480)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000440)={0x101, 0x33424752, 0x2, 0xffffffff, 0x2, @discrete={0x5, 0x200}}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast2, @in=@local}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1, {0x9, 0xfffffffd, 0x9, 0x5537}}) msgget$private(0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r2, r1, 0x0) 14:50:27 executing program 5: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 14:50:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) r3 = perf_event_open(0x0, r2, 0x10, r0, 0x16) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r5 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x1ff) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000440)=0x14) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x6685, &(0x7f0000001500)={0x1, 0x8000, 0x1000, 0x1000, &(0x7f0000000480)="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", 0x72, 0x0, &(0x7f0000001480)="1bfc1f04867a56b24be6701a4b31353b80ac26ad8f56c4248071782c606fd99c43ac4e3aba172d0ad351518b9d75e82273b1fc58767526d066618fa6425d6a3c8cf27a263420b5c79d00e85da3c9431fb3ee931534429b3a3d4ad8e94c4e93f3d25129548be06a11dca40a75ba03df367615"}) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x2000006) 14:50:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1, {0x9, 0xfffffffd, 0x9, 0x5537}}) msgget$private(0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) 14:50:27 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x440c0800}, 0xc) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000480)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000440)={0x101, 0x33424752, 0x2, 0xffffffff, 0x2, @discrete={0x5, 0x200}}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast2, @in=@local}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x7, 0x2a00) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x440c0800}, 0xc) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000480)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000440)={0x101, 0x33424752, 0x2, 0xffffffff, 0x2, @discrete={0x5, 0x200}}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast2, @in=@local}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1, {0x9, 0xfffffffd, 0x9, 0x5537}}) msgget$private(0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) 14:50:28 executing program 5: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 14:50:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1, {0x9, 0xfffffffd, 0x9, 0x5537}}) msgget$private(0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r2, r1, 0x0) 14:50:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1, {0x9, 0xfffffffd, 0x9, 0x5537}}) msgget$private(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(0xffffffffffffffff, 0xffffffffffffffb2, &(0x7f0000000040)) 14:50:28 executing program 5: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 14:50:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) r3 = perf_event_open(0x0, r2, 0x10, r0, 0x16) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r5 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x1ff) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000440)=0x14) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x6685, &(0x7f0000001500)={0x1, 0x8000, 0x1000, 0x1000, &(0x7f0000000480)="712c23d90d1b69d8efa78b79df2cbfea2195f5ca0e904f4b0cff57990d209bbab1841dfb85cb5c2765510309e29ec1635fe58a61ec895b75fb554515feb9f88384a6c0f9f3dfe609d5b911831146e973582865b05174f92b4d690935d67a9b9065a41b85d61dd1c8d8068e3caf3053d7d2ece1a9a8ea03813802caa601846cbf836fff5f8237ae0190cb8407bd2e22f4c2be1455ac449b071340ed2466266c63766aae3c98c3ec20e6d0463987c1feae37237ab6fb7212dc22097a76bbfe8a3bbd578745bf7d02abe967013fab993c0366c722dd11e3a1f5d0c2cb469410e0b3b29d68106f20ff8c5230d0985785633b2a7cd804d47bd03da404505ed1cc7c12e717fa2fc0b0a888147f5b70576ea8942dd08c63d2ae7e6c576c3611b6ec833de0bc27d8fbe1cfc4f65fa311266ad1cabab561a839945fd79c6a29899b33c2db907e6b8c61d6c364f777b3a5932584be683a55db323aa09ae4d3e8b240248ec231c16d345d6fd293954c41c1840f5b83195d78ab45f14eb2a41d108f7436ccbe63c552ff3cf8d3bc6505dcc9400b0c0cdc9605409a1f3299e2becb0091421545fd750dc52cd66ced734df835a7e83f8d67e59b257db551f4cdb4026e69a5065c9f044a9a719453266625cb9c7c996678285a7d29abfd50a069df96d6c18062f27d62a95ce4d735dedcee42d7204aa91729c1445f253e2c7c0f9e711eedb62a7eb915fd38b6cdab847fd6e099269d02ca28f5ff7209072ec29c43c65093d1dd17cd5bb09c416d501fe5bcfe64f77afbdf3deef7beb7f40d758a6fadf908badcab0a2cdbd5437cd13766e404061c3520daf509f5d93838a317d11f3018cfc8eef6eb8c1363f69c138f42704cc8de000faf58268b7cc5adbbde92ede54fe21fca0d083658fd76a219b403a826f32e36992ca4ed263e89976dcf12ab1ada82388e90b39c8ff82081280753f441dd467ab66e6d62265e392501ba577c82ceb04278a432836a72424f7d29fb5bf0b19fbc7dd84981aef28475158c2930cccc21e858e9e827b900615affe06cede65405e37424b091b756a080de481ec913a9fe8cad2082d7fedc22115e134d55d8f8dfeb6461a234cbf8abc8a9ce8efa4c9b97b0d8bf21af3bbfef0bb3182a9e8371eacfd544dff038c280e26320e1b0029275d72dae7da6ff66deb6805fa65a07057e6bf50627e231b05114ba763bb742d5d2994707f2ef39b68ae1c0b7962c8f8786785d1cc677efe51174086bfb788103b5613ef06b80fe865d9472b23e35fe0cbab3ea85c26ade9292d579b51f2c31c126f0112aab0f7a88144dfc6446c650ae0007f6f7ca0977c233c01c0ddb3ca78202d53de72fdb9783cd0bb99706993e06de0cc69201aa2fb063910122470ceb65e86c7be19e9b81ebeb58317b9105fa0cd82df53480ed67541f94f4e19e38ed78961b29729abd56e32c0c6e529516ffba913d1915051dfd7b9174062cc74fc4419ee6480466ecce3d8dfeef0ff45997c834fe29001a9fd9e7bd3fab1cf8c07544f14cc252a6894c1d9ab5c03f0e248822dc1eef576fc10524a50b3390fe1778f5bba8eaaf1b241be87dfc98394c1b506972d56470fdf26142bdb9a45dfa5c7c235964902a77771430536194ed27fadc787db0417cde633eb67b6a09fc21eb2f06c6965ff4b29e3f220e640de09923334ef647cb0634a0e8b2c0b864cd8376de2077eefee283de6c6e5e46505e7d280486831184950ebb575c3089ea4b84ece82026a919cec85aa8a5527c4505ca6dff199b82991fcec5d90a8358274427ace07d4567bea9d10fe688d5489c48d6e01534f24d8996d4c01b90092ec6c5ce18e5affc0ae24b98708f3fcb0f9e0187b80164fd1cbf918615df53b2a38a1840c026b9b18de81128d49f3a42bc201809df147b28657172e35ddfec9e79fedf0921cd87af8a3f722f6e9e2835041e80e6d61058e1200a8de3e71dc6b127cb273499b7e8194b95861f38b1514d70d1cefb7dce67f32ea8701aaf3a9413b782759e2a8c5250ab5ebf23ddca1c6dfccab05729f0ad72bc9c86d7e44e9037c8db4997dcf906e73e4ebef66d567394816ffbf913fe6599d40ac45a72c37ee367b14cd6fe2bb9e7c101f0150d42b5f0a33b288183f9a2d4102edb38a7ec3b7bcc326532fc2f260aacac442e494eee587fbd6e0a775be0853c5e89b249d21948f15577847d6218092f35b9726b43e99bc2c5cd5e0c1fc4bbc39ce3f6c720f3d1cc31e50d721de9d079fd5d2c0700caace41f1c1d3bcdfee6a6c268ff9028bfcf369ebf50f757ab9652d70b303a410cf80dcb94f508dc5fc4c99f448f2ce92f9d3b30e5d0ab17af3e29247179b124aac5a037bf80cc61ece6434caf25f9206e90f98cca8f71c2bfb3b5814efa66cdd54ad3f69199264d68714002ce8028016f28a08dc8c7cf1eab565d6bb8abf2cccc8dd0022764e8456cdc4bae4cb058af142c39de6a58763757c92afe813c6ea317e07754d946b376a869293ee05454c3be20fa9f5c13b08abf383304e07a78cafb9f89adcc88664a256dd6b2e0e417fb0fa6bc4c40e5e998d2ce831ee1671fb73160994fd29f8803e62a8ec54475cac87473860e4aba472d456dd491653e9e6d737016d2fc520d8cb86b6998cc2306128323d42846c9fdb81265a5509378e518fd076b7f759f662c49f91fe9accc4cca4b3abfd29aacdbb7d969a71438b41f6cb53f3b3db79dd10f15cbfdbbaa865905d64e4fb8777fa7851279ce557483c533622bb11296a9a4eceb25252765acd9536b4e48b2ffb366adfcf3b0b2313c1e5137734621739ed828ffcb61ea4e9fc8b97df359f737c01cd05fb771d1ce8561a9fd84fe07dae726de2a86719a19317703b6ce63ecf203d306c753c8e861be1e7131baeaabf685045efd7bd5badbc4c80901c47ad245a9826c3264bc94a94d3b8a909016b84654e44e31a6d94878542b9d9a9811e526d1ca42eba72c7edb51b87fb817aeae90cdb3ea02569cb0ca0d2bd9e940a37c04f98134966518adc71571f56a02e04233bd24de3d4ec42e02dc4aff61ef5de203f2027e36792fd85b181035660eff8c31a6cc9f729c068a0b00d5133d8171214b2abbbadf8ec95be7b28723b1ba6d6cd6b24ca66bb93b365505ab840299ca71628e0150823dfd31579fede54c781adda8088fc572c592f4425e264eef73a42cf11fb6876628f0d26400c4737f1e2a1878032208b7a30320f7c7a5d03af711c8974baae691df07bf9480fe4c4d8ac5f48519503c77075696698abf8e99d248b373c6a4afb45ae78e65ce919597d1c7a2372deeee497e12094401fd4fb7c96e8010bd8b3b175ba55a85e6f7427e11edea2cda4773ab15e50cd22f1576a0b3b70bc241577223355a7c2a42d7267972ed70056a43a7a26c17f992de11809c264f21281c56f6acc16ca59621937c5ffa3f30818bf6e8a9c43e734e25e084a8ec1c494679d4120d462e6cc9a96d488454536d7459b673264927957eeec40a4685e3b335d46b5f0b1109cfae3b1da98c6d183f11c9bb4a49a126aafda36a391f0b4bb48a84bf682f19dacba962cadb8e2ab05bc9c22ecb5364e39a59bd059bc1cfd6a2981f88358285f877a4bcfb07fbeb09a8723b37950cb6076d6b6ed36a9b963dc5a7ecc74d2f27ba88d288dbf702dff3bb514beea37b1645362e2d880e88f0c8fe6353fd4ea5ba50e18ea5aafbd3b5d14968379bb5c288f6bf8cfce9ae11e1fde0eeffe00fc773fd47caf1a046318b5eae91c6a054eef8f03641f34cd8ebf444321987d7760b5f00c147cd69a110b2df96760c6b879d8609e5fac1bf2e1571e065014ccde190d5431ac506a5999c579bad17f963d668a9f6f979f483568928d05866f68e4dd83ef7eeabefe32e0d26c7167059b2a9add03f0cabf93a7e99ea501b311447f1c4787a81c20dd9d0471f977d5b5624320536a4e5cb7e76085cff4cfc86857d0e5a1cbfcb4de0e1b6552e3bad55e5c5f4efbdbc4e7c5041fda0c65d6c37738bbad30ae85f0c595320e3b573e5cd37b23a12c21cfde6f8d7ca6aa60ce5da08d355cc6ce8aa36f2a1082db3084102865cb5f1a8db47a83376e4f2e57e6894121d2d95ca488b408b483738d6d683fa3e3b57171d0967d18a7f3918793ed174357655afd5875505d288e3aab3977c60077520f41e6845c2441d206b7f32ef54014882e343e18eccf1043e3f025b0c4049bf79f676e11549da7c464c54625def6e6c860cc326213c501afdc97698d5c2aa9d30baf03889cdbc707f555d48f033c7505e6a1a75d52e3f759a79d81ad2a728fcf1b603ebc8a7a39282bd6469def63068317934a26d8f38c7fa5db06dc0553df8a35781b13db911eb283b39e17081c044d105f88c6b899aface6bb9056e35f2bed45cf9b4e5037693732b2f6afd6a8d9fe154ed8dc65fb1d365f51b02d6a709d326b9b00742683c8d62d70355a1608abbde3be9207f04a33b72d0fc8df0a4cca82ae49c37b4f914f6e3ce759b7d70c28b6b7fd2a6dcefad8182190c35901d63d9f26bf50bb5838ee111d373b1facf5d551bda44fff6ea6c3ff1d53cc89a26f0b70a0bda036d8ab69f15203de34a0c205887edf4bdac06ea21aed1ab02f3248fc35b7ffcfa6814882906f20ea9b15d9921a990bbb17f57365e803134f4befc9e4eeee573ff6f96ee6d8a0b593e1b1e750a8dc6f91db0ce4d3c2eda591280d85a06d1db702d1b61138f50232d09d4b7e38bd1e24e705d2d9d40f94f034f52ca3369f2a145053865c41993b8bcd437827de4824dd67b77f2dd47da93c3adc6548ebfa517f9d25844d5ba30654217885b24172e42787c542249f3e39112b1aa87267faa9cf7379dcf45a1dc382d68c5642f867b34ccfc440e4d34d999425b68b422fd9e2d9bcf8cd4c778ec2825f11098f0b8a65e53a042a724960fc4dcb4b4802c1346c4b58ca82a615032d654a55dad441d4dd5536543f8d3edd8ebf6c1dd88487870a4f75b8f3686233a280f7d77289ae473310652003b9c6bd4b9898a09b9d3ba15c8f80074c37456ca00642448c044203231c602cb619b2cad8d67667e65deee0004a80f678b4b9388833cb601ef44e013940291696c7c1059c7bb03cb7f541445c21ad83d1a9d1c955697f383191a92d40c171a3378da5e926bd38e7c5f7f6e9a86399f231a845f053efca1a3f6bdc038d9b96662910cd017e1d3026dc654c86eb0f4b636650e712f1c7383326bcbf885a32963c138c9130d953d9b9db72204e274e9b1ffbba1c15f09043fc5f55404518bba622e3ea82d6d072afb99196c1672566596087f35876e12197d153f3c0a4e30e535904b66d3212e64454929556e02e90c075e57efb7bb4d877431a014b3f7424ad34b3cb8083d475d9f9ada028c4f693cbbd58f1dad3f476b835a670fee955ac8efeae003652c07c9ff4a38774f2c0c35338d8201b04cea70b1729fbd65dcf5c2541651adfa64348530db91b29f600f8f6aa5f296820367706d6065a0fea40074992f73781e4eca4a55f021680877470c87b121e5656aebaaeeadf1690d3494a3e96e7056b33a5e517c79fdfd8e9ca807d5c875215cf345eaa7b9505125aabd2051e4d3a507c0326cc64d65d5be9acaa861c885515cccc96a741d1a9ca551b9f060a4dc027b5422b6ca9454b5fa1c4a5e13a603f9d992af1eb356bd319a59ebd3b9b85172181880c4c4053cbee6a646688204d5ec420b4e9629a979b0d0a3cee65016ac8bc850fda9ef29539db3e09311d7a812b4a43163396e388a93a8eba3097f63fa", 0x72, 0x0, &(0x7f0000001480)="1bfc1f04867a56b24be6701a4b31353b80ac26ad8f56c4248071782c606fd99c43ac4e3aba172d0ad351518b9d75e82273b1fc58767526d066618fa6425d6a3c8cf27a263420b5c79d00e85da3c9431fb3ee931534429b3a3d4ad8e94c4e93f3d25129548be06a11dca40a75ba03df367615"}) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x2000006) 14:50:28 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x440c0800}, 0xc) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000480)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000440)={0x101, 0x33424752, 0x2, 0xffffffff, 0x2, @discrete={0x5, 0x200}}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast2, @in=@local}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:28 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x440c0800}, 0xc) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000480)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000440)={0x101, 0x33424752, 0x2, 0xffffffff, 0x2, @discrete={0x5, 0x200}}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast2, @in=@local}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x7, 0x2a00) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1, {0x9, 0xfffffffd, 0x9, 0x5537}}) msgget$private(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(0xffffffffffffffff, 0xffffffffffffffb2, &(0x7f0000000040)) 14:50:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1, {0x9, 0xfffffffd, 0x9, 0x5537}}) msgget$private(0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r2, r1, 0x0) 14:50:28 executing program 5: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 14:50:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1, {0x9, 0xfffffffd, 0x9, 0x5537}}) msgget$private(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(0xffffffffffffffff, 0xffffffffffffffb2, &(0x7f0000000040)) 14:50:29 executing program 5: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 14:50:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1, {0x9, 0xfffffffd, 0x9, 0x5537}}) msgget$private(0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) dup3(r2, r1, 0x0) 14:50:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1, {0x9, 0xfffffffd, 0x9, 0x5537}}) r1 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) 14:50:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) r3 = perf_event_open(0x0, r2, 0x10, r0, 0x16) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r5 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x1ff) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000440)=0x14) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x6685, &(0x7f0000001500)={0x1, 0x8000, 0x1000, 0x1000, &(0x7f0000000480)="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", 0x72, 0x0, &(0x7f0000001480)="1bfc1f04867a56b24be6701a4b31353b80ac26ad8f56c4248071782c606fd99c43ac4e3aba172d0ad351518b9d75e82273b1fc58767526d066618fa6425d6a3c8cf27a263420b5c79d00e85da3c9431fb3ee931534429b3a3d4ad8e94c4e93f3d25129548be06a11dca40a75ba03df367615"}) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) sendfile(r5, r5, 0x0, 0x2000006) 14:50:29 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x440c0800}, 0xc) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000480)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000440)={0x101, 0x33424752, 0x2, 0xffffffff, 0x2, @discrete={0x5, 0x200}}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast2, @in=@local}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:29 executing program 5: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) r3 = syz_open_pts(r2, 0x4000000000000002) r4 = dup3(r3, r1, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 14:50:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1, {0x9, 0xfffffffd, 0x9, 0x5537}}) msgget$private(0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) dup3(r2, r1, 0x0) 14:50:29 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x440c0800}, 0xc) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000480)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000440)={0x101, 0x33424752, 0x2, 0xffffffff, 0x2, @discrete={0x5, 0x200}}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast2, @in=@local}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x7, 0x2a00) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1, {0x9, 0xfffffffd, 0x9, 0x5537}}) r1 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) 14:50:29 executing program 5: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) r3 = syz_open_pts(r2, 0x4000000000000002) r4 = dup3(r3, r1, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 14:50:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x2) r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 14:50:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1, {0x9, 0xfffffffd, 0x9, 0x5537}}) msgget$private(0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) dup3(r2, r1, 0x0) 14:50:29 executing program 5: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) r3 = syz_open_pts(r2, 0x4000000000000002) r4 = dup3(r3, r1, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 14:50:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x440c0800}, 0xc) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000480)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000440)={0x101, 0x33424752, 0x2, 0xffffffff, 0x2, @discrete={0x5, 0x200}}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast2, @in=@local}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1, {0x9, 0xfffffffd, 0x9, 0x5537}}) msgget$private(0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r2, r1, 0x0) 14:50:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 14:50:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) r3 = perf_event_open(0x0, r2, 0x10, r0, 0x16) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r5 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x1ff) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000440)=0x14) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x6685, &(0x7f0000001500)={0x1, 0x8000, 0x1000, 0x1000, &(0x7f0000000480)="712c23d90d1b69d8efa78b79df2cbfea2195f5ca0e904f4b0cff57990d209bbab1841dfb85cb5c2765510309e29ec1635fe58a61ec895b75fb554515feb9f88384a6c0f9f3dfe609d5b911831146e973582865b05174f92b4d690935d67a9b9065a41b85d61dd1c8d8068e3caf3053d7d2ece1a9a8ea03813802caa601846cbf836fff5f8237ae0190cb8407bd2e22f4c2be1455ac449b071340ed2466266c63766aae3c98c3ec20e6d0463987c1feae37237ab6fb7212dc22097a76bbfe8a3bbd578745bf7d02abe967013fab993c0366c722dd11e3a1f5d0c2cb469410e0b3b29d68106f20ff8c5230d0985785633b2a7cd804d47bd03da404505ed1cc7c12e717fa2fc0b0a888147f5b70576ea8942dd08c63d2ae7e6c576c3611b6ec833de0bc27d8fbe1cfc4f65fa311266ad1cabab561a839945fd79c6a29899b33c2db907e6b8c61d6c364f777b3a5932584be683a55db323aa09ae4d3e8b240248ec231c16d345d6fd293954c41c1840f5b83195d78ab45f14eb2a41d108f7436ccbe63c552ff3cf8d3bc6505dcc9400b0c0cdc9605409a1f3299e2becb0091421545fd750dc52cd66ced734df835a7e83f8d67e59b257db551f4cdb4026e69a5065c9f044a9a719453266625cb9c7c996678285a7d29abfd50a069df96d6c18062f27d62a95ce4d735dedcee42d7204aa91729c1445f253e2c7c0f9e711eedb62a7eb915fd38b6cdab847fd6e099269d02ca28f5ff7209072ec29c43c65093d1dd17cd5bb09c416d501fe5bcfe64f77afbdf3deef7beb7f40d758a6fadf908badcab0a2cdbd5437cd13766e404061c3520daf509f5d93838a317d11f3018cfc8eef6eb8c1363f69c138f42704cc8de000faf58268b7cc5adbbde92ede54fe21fca0d083658fd76a219b403a826f32e36992ca4ed263e89976dcf12ab1ada82388e90b39c8ff82081280753f441dd467ab66e6d62265e392501ba577c82ceb04278a432836a72424f7d29fb5bf0b19fbc7dd84981aef28475158c2930cccc21e858e9e827b900615affe06cede65405e37424b091b756a080de481ec913a9fe8cad2082d7fedc22115e134d55d8f8dfeb6461a234cbf8abc8a9ce8efa4c9b97b0d8bf21af3bbfef0bb3182a9e8371eacfd544dff038c280e26320e1b0029275d72dae7da6ff66deb6805fa65a07057e6bf50627e231b05114ba763bb742d5d2994707f2ef39b68ae1c0b7962c8f8786785d1cc677efe51174086bfb788103b5613ef06b80fe865d9472b23e35fe0cbab3ea85c26ade9292d579b51f2c31c126f0112aab0f7a88144dfc6446c650ae0007f6f7ca0977c233c01c0ddb3ca78202d53de72fdb9783cd0bb99706993e06de0cc69201aa2fb063910122470ceb65e86c7be19e9b81ebeb58317b9105fa0cd82df53480ed67541f94f4e19e38ed78961b29729abd56e32c0c6e529516ffba913d1915051dfd7b9174062cc74fc4419ee6480466ecce3d8dfeef0ff45997c834fe29001a9fd9e7bd3fab1cf8c07544f14cc252a6894c1d9ab5c03f0e248822dc1eef576fc10524a50b3390fe1778f5bba8eaaf1b241be87dfc98394c1b506972d56470fdf26142bdb9a45dfa5c7c235964902a77771430536194ed27fadc787db0417cde633eb67b6a09fc21eb2f06c6965ff4b29e3f220e640de09923334ef647cb0634a0e8b2c0b864cd8376de2077eefee283de6c6e5e46505e7d280486831184950ebb575c3089ea4b84ece82026a919cec85aa8a5527c4505ca6dff199b82991fcec5d90a8358274427ace07d4567bea9d10fe688d5489c48d6e01534f24d8996d4c01b90092ec6c5ce18e5affc0ae24b98708f3fcb0f9e0187b80164fd1cbf918615df53b2a38a1840c026b9b18de81128d49f3a42bc201809df147b28657172e35ddfec9e79fedf0921cd87af8a3f722f6e9e2835041e80e6d61058e1200a8de3e71dc6b127cb273499b7e8194b95861f38b1514d70d1cefb7dce67f32ea8701aaf3a9413b782759e2a8c5250ab5ebf23ddca1c6dfccab05729f0ad72bc9c86d7e44e9037c8db4997dcf906e73e4ebef66d567394816ffbf913fe6599d40ac45a72c37ee367b14cd6fe2bb9e7c101f0150d42b5f0a33b288183f9a2d4102edb38a7ec3b7bcc326532fc2f260aacac442e494eee587fbd6e0a775be0853c5e89b249d21948f15577847d6218092f35b9726b43e99bc2c5cd5e0c1fc4bbc39ce3f6c720f3d1cc31e50d721de9d079fd5d2c0700caace41f1c1d3bcdfee6a6c268ff9028bfcf369ebf50f757ab9652d70b303a410cf80dcb94f508dc5fc4c99f448f2ce92f9d3b30e5d0ab17af3e29247179b124aac5a037bf80cc61ece6434caf25f9206e90f98cca8f71c2bfb3b5814efa66cdd54ad3f69199264d68714002ce8028016f28a08dc8c7cf1eab565d6bb8abf2cccc8dd0022764e8456cdc4bae4cb058af142c39de6a58763757c92afe813c6ea317e07754d946b376a869293ee05454c3be20fa9f5c13b08abf383304e07a78cafb9f89adcc88664a256dd6b2e0e417fb0fa6bc4c40e5e998d2ce831ee1671fb73160994fd29f8803e62a8ec54475cac87473860e4aba472d456dd491653e9e6d737016d2fc520d8cb86b6998cc2306128323d42846c9fdb81265a5509378e518fd076b7f759f662c49f91fe9accc4cca4b3abfd29aacdbb7d969a71438b41f6cb53f3b3db79dd10f15cbfdbbaa865905d64e4fb8777fa7851279ce557483c533622bb11296a9a4eceb25252765acd9536b4e48b2ffb366adfcf3b0b2313c1e5137734621739ed828ffcb61ea4e9fc8b97df359f737c01cd05fb771d1ce8561a9fd84fe07dae726de2a86719a19317703b6ce63ecf203d306c753c8e861be1e7131baeaabf685045efd7bd5badbc4c80901c47ad245a9826c3264bc94a94d3b8a909016b84654e44e31a6d94878542b9d9a9811e526d1ca42eba72c7edb51b87fb817aeae90cdb3ea02569cb0ca0d2bd9e940a37c04f98134966518adc71571f56a02e04233bd24de3d4ec42e02dc4aff61ef5de203f2027e36792fd85b181035660eff8c31a6cc9f729c068a0b00d5133d8171214b2abbbadf8ec95be7b28723b1ba6d6cd6b24ca66bb93b365505ab840299ca71628e0150823dfd31579fede54c781adda8088fc572c592f4425e264eef73a42cf11fb6876628f0d26400c4737f1e2a1878032208b7a30320f7c7a5d03af711c8974baae691df07bf9480fe4c4d8ac5f48519503c77075696698abf8e99d248b373c6a4afb45ae78e65ce919597d1c7a2372deeee497e12094401fd4fb7c96e8010bd8b3b175ba55a85e6f7427e11edea2cda4773ab15e50cd22f1576a0b3b70bc241577223355a7c2a42d7267972ed70056a43a7a26c17f992de11809c264f21281c56f6acc16ca59621937c5ffa3f30818bf6e8a9c43e734e25e084a8ec1c494679d4120d462e6cc9a96d488454536d7459b673264927957eeec40a4685e3b335d46b5f0b1109cfae3b1da98c6d183f11c9bb4a49a126aafda36a391f0b4bb48a84bf682f19dacba962cadb8e2ab05bc9c22ecb5364e39a59bd059bc1cfd6a2981f88358285f877a4bcfb07fbeb09a8723b37950cb6076d6b6ed36a9b963dc5a7ecc74d2f27ba88d288dbf702dff3bb514beea37b1645362e2d880e88f0c8fe6353fd4ea5ba50e18ea5aafbd3b5d14968379bb5c288f6bf8cfce9ae11e1fde0eeffe00fc773fd47caf1a046318b5eae91c6a054eef8f03641f34cd8ebf444321987d7760b5f00c147cd69a110b2df96760c6b879d8609e5fac1bf2e1571e065014ccde190d5431ac506a5999c579bad17f963d668a9f6f979f483568928d05866f68e4dd83ef7eeabefe32e0d26c7167059b2a9add03f0cabf93a7e99ea501b311447f1c4787a81c20dd9d0471f977d5b5624320536a4e5cb7e76085cff4cfc86857d0e5a1cbfcb4de0e1b6552e3bad55e5c5f4efbdbc4e7c5041fda0c65d6c37738bbad30ae85f0c595320e3b573e5cd37b23a12c21cfde6f8d7ca6aa60ce5da08d355cc6ce8aa36f2a1082db3084102865cb5f1a8db47a83376e4f2e57e6894121d2d95ca488b408b483738d6d683fa3e3b57171d0967d18a7f3918793ed174357655afd5875505d288e3aab3977c60077520f41e6845c2441d206b7f32ef54014882e343e18eccf1043e3f025b0c4049bf79f676e11549da7c464c54625def6e6c860cc326213c501afdc97698d5c2aa9d30baf03889cdbc707f555d48f033c7505e6a1a75d52e3f759a79d81ad2a728fcf1b603ebc8a7a39282bd6469def63068317934a26d8f38c7fa5db06dc0553df8a35781b13db911eb283b39e17081c044d105f88c6b899aface6bb9056e35f2bed45cf9b4e5037693732b2f6afd6a8d9fe154ed8dc65fb1d365f51b02d6a709d326b9b00742683c8d62d70355a1608abbde3be9207f04a33b72d0fc8df0a4cca82ae49c37b4f914f6e3ce759b7d70c28b6b7fd2a6dcefad8182190c35901d63d9f26bf50bb5838ee111d373b1facf5d551bda44fff6ea6c3ff1d53cc89a26f0b70a0bda036d8ab69f15203de34a0c205887edf4bdac06ea21aed1ab02f3248fc35b7ffcfa6814882906f20ea9b15d9921a990bbb17f57365e803134f4befc9e4eeee573ff6f96ee6d8a0b593e1b1e750a8dc6f91db0ce4d3c2eda591280d85a06d1db702d1b61138f50232d09d4b7e38bd1e24e705d2d9d40f94f034f52ca3369f2a145053865c41993b8bcd437827de4824dd67b77f2dd47da93c3adc6548ebfa517f9d25844d5ba30654217885b24172e42787c542249f3e39112b1aa87267faa9cf7379dcf45a1dc382d68c5642f867b34ccfc440e4d34d999425b68b422fd9e2d9bcf8cd4c778ec2825f11098f0b8a65e53a042a724960fc4dcb4b4802c1346c4b58ca82a615032d654a55dad441d4dd5536543f8d3edd8ebf6c1dd88487870a4f75b8f3686233a280f7d77289ae473310652003b9c6bd4b9898a09b9d3ba15c8f80074c37456ca00642448c044203231c602cb619b2cad8d67667e65deee0004a80f678b4b9388833cb601ef44e013940291696c7c1059c7bb03cb7f541445c21ad83d1a9d1c955697f383191a92d40c171a3378da5e926bd38e7c5f7f6e9a86399f231a845f053efca1a3f6bdc038d9b96662910cd017e1d3026dc654c86eb0f4b636650e712f1c7383326bcbf885a32963c138c9130d953d9b9db72204e274e9b1ffbba1c15f09043fc5f55404518bba622e3ea82d6d072afb99196c1672566596087f35876e12197d153f3c0a4e30e535904b66d3212e64454929556e02e90c075e57efb7bb4d877431a014b3f7424ad34b3cb8083d475d9f9ada028c4f693cbbd58f1dad3f476b835a670fee955ac8efeae003652c07c9ff4a38774f2c0c35338d8201b04cea70b1729fbd65dcf5c2541651adfa64348530db91b29f600f8f6aa5f296820367706d6065a0fea40074992f73781e4eca4a55f021680877470c87b121e5656aebaaeeadf1690d3494a3e96e7056b33a5e517c79fdfd8e9ca807d5c875215cf345eaa7b9505125aabd2051e4d3a507c0326cc64d65d5be9acaa861c885515cccc96a741d1a9ca551b9f060a4dc027b5422b6ca9454b5fa1c4a5e13a603f9d992af1eb356bd319a59ebd3b9b85172181880c4c4053cbee6a646688204d5ec420b4e9629a979b0d0a3cee65016ac8bc850fda9ef29539db3e09311d7a812b4a43163396e388a93a8eba3097f63fa", 0x72, 0x0, &(0x7f0000001480)="1bfc1f04867a56b24be6701a4b31353b80ac26ad8f56c4248071782c606fd99c43ac4e3aba172d0ad351518b9d75e82273b1fc58767526d066618fa6425d6a3c8cf27a263420b5c79d00e85da3c9431fb3ee931534429b3a3d4ad8e94c4e93f3d25129548be06a11dca40a75ba03df367615"}) sendfile(r5, r5, 0x0, 0x2000006) 14:50:30 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x440c0800}, 0xc) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000480)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000440)={0x101, 0x33424752, 0x2, 0xffffffff, 0x2, @discrete={0x5, 0x200}}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast2, @in=@local}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 14:50:30 executing program 5: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r3 = dup3(r2, r1, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 14:50:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1, {0x9, 0xfffffffd, 0x9, 0x5537}}) msgget$private(0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r2, r1, 0x0) 14:50:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x440c0800}, 0xc) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000480)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000440)={0x101, 0x33424752, 0x2, 0xffffffff, 0x2, @discrete={0x5, 0x200}}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast2, @in=@local}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:30 executing program 5: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r3 = dup3(r2, r1, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 14:50:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) r3 = perf_event_open(0x0, r2, 0x10, r0, 0x16) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r5 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x1ff) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000440)=0x14) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x6685, &(0x7f0000001500)={0x1, 0x8000, 0x1000, 0x1000, &(0x7f0000000480)="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", 0x72, 0x0, &(0x7f0000001480)="1bfc1f04867a56b24be6701a4b31353b80ac26ad8f56c4248071782c606fd99c43ac4e3aba172d0ad351518b9d75e82273b1fc58767526d066618fa6425d6a3c8cf27a263420b5c79d00e85da3c9431fb3ee931534429b3a3d4ad8e94c4e93f3d25129548be06a11dca40a75ba03df367615"}) sendfile(r5, r5, 0x0, 0x2000006) 14:50:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 14:50:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x440c0800}, 0xc) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000480)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000440)={0x101, 0x33424752, 0x2, 0xffffffff, 0x2, @discrete={0x5, 0x200}}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast2, @in=@local}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1, {0x9, 0xfffffffd, 0x9, 0x5537}}) msgget$private(0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r2, r1, 0x0) 14:50:30 executing program 5: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r3 = dup3(r2, r1, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 14:50:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 14:50:30 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x440c0800}, 0xc) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000480)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000440)={0x101, 0x33424752, 0x2, 0xffffffff, 0x2, @discrete={0x5, 0x200}}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast2, @in=@local}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) r3 = perf_event_open(0x0, r2, 0x10, r0, 0x16) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r5 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r6 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x1ff) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000440)=0x14) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x6685, &(0x7f0000001500)={0x1, 0x8000, 0x1000, 0x1000, &(0x7f0000000480)="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", 0x72, 0x0, &(0x7f0000001480)="1bfc1f04867a56b24be6701a4b31353b80ac26ad8f56c4248071782c606fd99c43ac4e3aba172d0ad351518b9d75e82273b1fc58767526d066618fa6425d6a3c8cf27a263420b5c79d00e85da3c9431fb3ee931534429b3a3d4ad8e94c4e93f3d25129548be06a11dca40a75ba03df367615"}) sendfile(r5, r5, 0x0, 0x2000006) 14:50:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x440c0800}, 0xc) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000480)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000440)={0x101, 0x33424752, 0x2, 0xffffffff, 0x2, @discrete={0x5, 0x200}}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast2, @in=@local}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, 0x0) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:31 executing program 1: r0 = syz_open_dev$dri(0x0, 0x36a7, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 14:50:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1, {0x9, 0xfffffffd, 0x9, 0x5537}}) msgget$private(0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(0xffffffffffffffff, r1, 0x0) 14:50:31 executing program 5: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 14:50:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) r3 = perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r4 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r5 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x1ff) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000440)=0x14) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, 0x0, 0x2000006) 14:50:31 executing program 1: r0 = syz_open_dev$dri(0x0, 0x36a7, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 14:50:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x440c0800}, 0xc) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000480)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000440)={0x101, 0x33424752, 0x2, 0xffffffff, 0x2, @discrete={0x5, 0x200}}) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1, {0x9, 0xfffffffd, 0x9, 0x5537}}) msgget$private(0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(0xffffffffffffffff, r1, 0x0) 14:50:31 executing program 5: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 14:50:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x440c0800}, 0xc) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000480)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000440)={0x101, 0x33424752, 0x2, 0xffffffff, 0x2, @discrete={0x5, 0x200}}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast2, @in=@local}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:31 executing program 1: r0 = syz_open_dev$dri(0x0, 0x36a7, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 14:50:31 executing program 5: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 14:50:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x440c0800}, 0xc) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000480)) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1, {0x9, 0xfffffffd, 0x9, 0x5537}}) msgget$private(0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(0xffffffffffffffff, r1, 0x0) 14:50:31 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 14:50:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x1ff) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000006) 14:50:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1, {0x9, 0xfffffffd, 0x9, 0x5537}}) msgget$private(0x0, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(0xffffffffffffffff, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r1, 0xffffffffffffffff, 0x0) 14:50:32 executing program 5: socket$inet(0x15, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 14:50:32 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x440c0800}, 0xc) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:32 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x440c0800}, 0xc) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000480)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000440)={0x101, 0x33424752, 0x2, 0xffffffff, 0x2, @discrete={0x5, 0x200}}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast2, @in=@local}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 14:50:32 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 14:50:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1, {0x9, 0xfffffffd, 0x9, 0x5537}}) msgget$private(0x0, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(0xffffffffffffffff, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r1, 0xffffffffffffffff, 0x0) 14:50:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 14:50:32 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) socket(0x840000000002, 0x3, 0xff) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 14:50:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1, {0x9, 0xfffffffd, 0x9, 0x5537}}) msgget$private(0x0, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(0xffffffffffffffff, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r1, 0xffffffffffffffff, 0x0) 14:50:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x1ff) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000006) 14:50:32 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 14:50:32 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:32 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x440c0800}, 0xc) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000480)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000440)={0x101, 0x33424752, 0x2, 0xffffffff, 0x2, @discrete={0x5, 0x200}}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast2, @in=@local}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 14:50:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1, {0x9, 0xfffffffd, 0x9, 0x5537}}) r1 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r2, r1, 0x0) 14:50:33 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 14:50:33 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x440c0800}, 0xc) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000480)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000440)={0x101, 0x33424752, 0x2, 0xffffffff, 0x2, @discrete={0x5, 0x200}}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast2, @in=@local}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:33 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 14:50:33 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x2) r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r1, r0, 0x0) 14:50:33 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 14:50:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x1ff) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000006) 14:50:33 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 14:50:33 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x440c0800}, 0xc) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000480)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000440)={0x101, 0x33424752, 0x2, 0xffffffff, 0x2, @discrete={0x5, 0x200}}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast2, @in=@local}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r1, r0, 0x0) 14:50:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 14:50:33 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 14:50:33 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x0, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 14:50:33 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x440c0800}, 0xc) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000480)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000440)={0x101, 0x33424752, 0x2, 0xffffffff, 0x2, @discrete={0x5, 0x200}}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast2, @in=@local}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, 0x0) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r1, r0, 0x0) 14:50:33 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 14:50:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000006) 14:50:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x0, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 14:50:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r1, r0, 0x0) 14:50:34 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x440c0800}, 0xc) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000480)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000440)={0x101, 0x33424752, 0x2, 0xffffffff, 0x2, @discrete={0x5, 0x200}}) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:34 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x0, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 14:50:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 14:50:34 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x36a7, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r1, r0, 0x0) 14:50:34 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x440c0800}, 0xc) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000480)) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 14:50:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 14:50:34 executing program 4: r0 = syz_open_dev$dri(0x0, 0x36a7, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r1, r0, 0x0) 14:50:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000006) 14:50:34 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:34 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) connect$netlink(r3, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x440c0800}, 0xc) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 14:50:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 14:50:34 executing program 4: r0 = syz_open_dev$dri(0x0, 0x36a7, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r1, r0, 0x0) 14:50:34 executing program 4: r0 = syz_open_dev$dri(0x0, 0x36a7, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r1, r0, 0x0) 14:50:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) 14:50:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 14:50:35 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:35 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r1, r0, 0x0) 14:50:35 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) socket(0x840000000002, 0x3, 0xff) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000006) 14:50:35 executing program 1: syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(0xffffffffffffffff, 0xffffffffffffffb2, &(0x7f0000000040)) 14:50:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 14:50:35 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:35 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r1, r0, 0x0) 14:50:35 executing program 1: syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(0xffffffffffffffff, 0xffffffffffffffb2, &(0x7f0000000040)) 14:50:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 14:50:35 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x44000, 0x0) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:35 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000006) 14:50:35 executing program 1: syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(0xffffffffffffffff, 0xffffffffffffffb2, &(0x7f0000000040)) 14:50:35 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r1, r0, 0x0) 14:50:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 14:50:35 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:35 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:35 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r1, r0, 0x0) 14:50:35 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0x0, &(0x7f0000000040)) 14:50:36 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 14:50:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 14:50:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) sendfile(r3, r3, 0x0, 0x2000006) 14:50:36 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:36 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r1, r0, 0x0) 14:50:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0x0, &(0x7f0000000040)) 14:50:36 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0x0, &(0x7f0000000040)) 14:50:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 14:50:36 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r1, r0, 0x0) 14:50:36 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, 0x0) 14:50:36 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r1, r0, 0x0) 14:50:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 14:50:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) sendfile(r3, r3, 0x0, 0x2000006) 14:50:36 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x31, 0x3a, 0x17, 0x1f, 0x4, 0x20c, 0x5, 0x136}) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:36 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x0, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r1, r0, 0x0) 14:50:37 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) sendfile(r3, r3, 0x0, 0x2000006) 14:50:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, 0x0) 14:50:37 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x0) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 14:50:37 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x0, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r1, r0, 0x0) 14:50:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, 0x0) 14:50:37 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x0) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 14:50:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x0, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r1, r0, 0x0) 14:50:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r3 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000006) 14:50:37 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') fspick(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:37 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000006) 14:50:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r1, r0, 0x0) 14:50:37 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:37 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x0) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 14:50:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r3 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000006) 14:50:37 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/4\x00') connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:37 executing program 5: syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 14:50:37 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r3 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000006) 14:50:38 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r1, r0, 0x0) 14:50:38 executing program 5: syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 14:50:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000006) 14:50:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000006) 14:50:38 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:38 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r1, r0, 0x0) 14:50:38 executing program 5: syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 14:50:38 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:38 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:38 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(0xffffffffffffffff, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r1, r0, 0x0) 14:50:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000006) 14:50:38 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 14:50:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000006) 14:50:38 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:39 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(0xffffffffffffffff, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r1, r0, 0x0) 14:50:39 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000006) 14:50:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 14:50:39 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) sendfile(r3, r3, 0x0, 0x2000006) 14:50:39 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(0xffffffffffffffff, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r1, r0, 0x0) 14:50:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) dup3(r2, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 14:50:39 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:39 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:39 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0x0, &(0x7f0000000040)) dup3(r1, r0, 0x0) 14:50:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000006) 14:50:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000006) 14:50:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) sendfile(r3, r3, 0x0, 0x2000006) 14:50:39 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:40 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0x0, &(0x7f0000000040)) dup3(r1, r0, 0x0) 14:50:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000006) 14:50:40 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000006) 14:50:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) sendfile(r3, r3, 0x0, 0x2000006) 14:50:40 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0x0, &(0x7f0000000040)) dup3(r1, r0, 0x0) 14:50:40 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000006) 14:50:40 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:40 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000006) 14:50:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, 0x0) dup3(r1, r0, 0x0) 14:50:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000006) 14:50:40 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:40 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:40 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, 0x0) dup3(r1, r0, 0x0) 14:50:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000006) 14:50:40 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000006) 14:50:41 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) sendfile(r3, r3, 0x0, 0x2000006) 14:50:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, 0x0) dup3(r1, r0, 0x0) 14:50:41 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:41 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(0xffffffffffffffff, r0, 0x0) 14:50:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)) r2 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x2000006) 14:50:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) sendfile(r3, r3, 0x0, 0x2000006) 14:50:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000006) 14:50:41 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:41 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(0xffffffffffffffff, r0, 0x0) 14:50:41 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:41 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) sendfile(r3, r3, 0x0, 0x2000006) 14:50:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(0xffffffffffffffff, r0, 0x0) 14:50:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) sendfile(r3, r3, 0x0, 0x2000006) 14:50:41 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) r2 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x2000006) 14:50:42 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r1, 0xffffffffffffffff, 0x0) 14:50:42 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:42 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000006) 14:50:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) sendfile(r3, r3, 0x0, 0x2000006) 14:50:42 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r1, 0xffffffffffffffff, 0x0) 14:50:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) r2 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x2000006) 14:50:42 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:42 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x0, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:42 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {}, 0x800000000008, 0x1}) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r1, 0xffffffffffffffff, 0x0) 14:50:42 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) sendfile(r3, r3, 0x0, 0x2000006) 14:50:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) r2 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x2000006) 14:50:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000006) 14:50:42 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x0, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000006) 14:50:42 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x0, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:42 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r3 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000006) 14:50:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000006) 14:50:43 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:43 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) sendfile(r3, r3, 0x0, 0x2000006) 14:50:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r3 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000006) 14:50:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) r2 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x2000006) 14:50:43 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) sendfile(r3, r3, 0x0, 0x2000006) 14:50:43 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:43 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) sendfile(r3, r3, 0x0, 0x2000006) 14:50:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) r2 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x2000006) 14:50:43 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r3 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000006) 14:50:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r3 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000006) 14:50:44 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:44 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) sendfile(r3, r3, 0x0, 0x2000006) 14:50:44 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000006) 14:50:44 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) sendfile(r3, r3, 0x0, 0x2000006) 14:50:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x2000006) 14:50:44 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000006) 14:50:44 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) sendfile(r3, r3, 0x0, 0x2000006) 14:50:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x2000006) 14:50:44 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000006) 14:50:45 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000006) 14:50:45 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:45 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:45 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) seccomp(0x1, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000006) 14:50:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x2000006) [ 223.361416][ T5] ================================================================== [ 223.369713][ T5] BUG: KASAN: use-after-free in rxrpc_send_keepalive+0x8a2/0x940 [ 223.377450][ T5] Read of size 8 at addr ffff888095983018 by task kworker/0:0/5 [ 223.385083][ T5] [ 223.387420][ T5] CPU: 0 PID: 5 Comm: kworker/0:0 Not tainted 5.4.0-rc2+ #0 [ 223.394702][ T5] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 223.404771][ T5] Workqueue: krxrpcd rxrpc_peer_keepalive_worker [ 223.411094][ T5] Call Trace: [ 223.414386][ T5] dump_stack+0x172/0x1f0 [ 223.418720][ T5] ? rxrpc_send_keepalive+0x8a2/0x940 [ 223.424109][ T5] print_address_description.constprop.0.cold+0xd4/0x30b [ 223.431143][ T5] ? rxrpc_send_keepalive+0x8a2/0x940 [ 223.436609][ T5] ? rxrpc_send_keepalive+0x8a2/0x940 [ 223.441987][ T5] __kasan_report.cold+0x1b/0x41 [ 223.446953][ T5] ? rxrpc_send_keepalive+0x8a2/0x940 [ 223.452335][ T5] kasan_report+0x12/0x20 14:50:45 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 223.456674][ T5] __asan_report_load8_noabort+0x14/0x20 [ 223.462310][ T5] rxrpc_send_keepalive+0x8a2/0x940 [ 223.467516][ T5] ? rxrpc_reject_packets+0xab0/0xab0 [ 223.472891][ T5] ? __kasan_check_read+0x11/0x20 [ 223.477922][ T5] ? mark_lock+0xc2/0x1220 [ 223.482340][ T5] ? find_held_lock+0x35/0x130 [ 223.487127][ T5] ? mark_held_locks+0xa4/0xf0 [ 223.491894][ T5] ? _raw_spin_unlock_bh+0x31/0x40 [ 223.497008][ T5] ? __local_bh_enable_ip+0x15a/0x270 [ 223.502385][ T5] ? lockdep_hardirqs_on+0x421/0x5e0 14:50:45 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:45 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 223.507671][ T5] ? rxrpc_peer_keepalive_worker+0x62e/0xd02 [ 223.513652][ T5] ? trace_hardirqs_on+0x67/0x240 [ 223.518681][ T5] ? rxrpc_peer_keepalive_worker+0x62e/0xd02 [ 223.524671][ T5] ? __local_bh_enable_ip+0x15a/0x270 [ 223.530054][ T5] rxrpc_peer_keepalive_worker+0x7be/0xd02 [ 223.535879][ T5] ? rxrpc_peer_add_rtt+0x650/0x650 [ 223.541080][ T5] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 223.546632][ T5] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 223.552616][ T5] ? trace_hardirqs_on+0x67/0x240 [ 223.557654][ T5] process_one_work+0x9af/0x1740 [ 223.562609][ T5] ? pwq_dec_nr_in_flight+0x320/0x320 [ 223.567981][ T5] ? lock_acquire+0x190/0x410 [ 223.572674][ T5] worker_thread+0x98/0xe40 [ 223.577196][ T5] kthread+0x361/0x430 [ 223.581269][ T5] ? process_one_work+0x1740/0x1740 [ 223.586469][ T5] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 223.592714][ T5] ret_from_fork+0x24/0x30 [ 223.597135][ T5] [ 223.599464][ T5] Allocated by task 8424: [ 223.603793][ T5] save_stack+0x23/0x90 14:50:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x229830665ef58976, 0x1, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x0, 0x3f, 0xba, 0x8}, {0x5606, 0x7, 0x6, 0x82bd}, {0x4, 0x8, 0x6, 0x7fffffff}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x44, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000014f000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) clone3(&(0x7f0000001780)={0x16188800, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), 0x28, 0x0, &(0x7f0000001640)=""/241, 0xf1, &(0x7f0000001740)=""/26}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x4000000000000002) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="6fff"], 0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000017c0)=0x0) perf_event_open(0x0, r2, 0x10, r0, 0x16) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x5, 0x200, 0x7fff, 0xfffffffffffeffff, 0x0, 0x200, 0x1000, 0x8001, 0x0, 0x80000000, 0x7, 0x7, 0x7, 0x3, 0x0, 0x8fe, 0x0, 0xffffffffffffff81, 0x0, 0x9, 0xa5, 0x8, 0x8001, 0x0, 0x0, 0x3fe, 0x0, 0xffffffffffff78b0, 0xfffffffffffff9fb, 0x4, 0x3f, 0x7]}) wait4(0x0, &(0x7f0000000400), 0x9d49c22bc3e78b76, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000380)='iC;`\xb6p+\x10', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000006) [ 223.607954][ T5] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 223.613582][ T5] kasan_kmalloc+0x9/0x10 [ 223.617909][ T5] __kmalloc_node_track_caller+0x4e/0x70 [ 223.623556][ T5] __kmalloc_reserve.isra.0+0x40/0xf0 [ 223.628922][ T5] __alloc_skb+0x10b/0x5e0 [ 223.633332][ T5] netlink_sendmsg+0x972/0xd60 [ 223.638121][ T5] sock_sendmsg+0xd7/0x130 [ 223.642569][ T5] ___sys_sendmsg+0x803/0x920 [ 223.647232][ T5] __sys_sendmsg+0x105/0x1d0 [ 223.651798][ T5] __x64_sys_sendmsg+0x78/0xb0 [ 223.656542][ T5] do_syscall_64+0xfa/0x760 [ 223.661027][ T5] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 223.666891][ T5] [ 223.669197][ T5] Freed by task 8424: [ 223.673165][ T5] save_stack+0x23/0x90 [ 223.677297][ T5] __kasan_slab_free+0x102/0x150 [ 223.682210][ T5] kasan_slab_free+0xe/0x10 [ 223.686687][ T5] kfree+0x10a/0x2c0 [ 223.690609][ T5] skb_free_head+0x93/0xb0 [ 223.695001][ T5] skb_release_data+0x42d/0x7c0 [ 223.699828][ T5] skb_release_all+0x4d/0x60 [ 223.704392][ T5] consume_skb+0xfb/0x3b0 [ 223.708740][ T5] netlink_unicast+0x539/0x710 [ 223.713480][ T5] netlink_sendmsg+0x8a5/0xd60 [ 223.718227][ T5] sock_sendmsg+0xd7/0x130 [ 223.722633][ T5] ___sys_sendmsg+0x803/0x920 [ 223.727291][ T5] __sys_sendmsg+0x105/0x1d0 [ 223.731904][ T5] __x64_sys_sendmsg+0x78/0xb0 [ 223.736686][ T5] do_syscall_64+0xfa/0x760 [ 223.741169][ T5] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 223.747035][ T5] [ 223.749354][ T5] The buggy address belongs to the object at ffff888095983000 [ 223.749354][ T5] which belongs to the cache kmalloc-1k of size 1024 [ 223.763383][ T5] The buggy address is located 24 bytes inside of [ 223.763383][ T5] 1024-byte region [ffff888095983000, ffff888095983400) [ 223.776628][ T5] The buggy address belongs to the page: [ 223.782238][ T5] page:ffffea00025660c0 refcount:1 mapcount:0 mapping:ffff8880aa400c40 index:0x0 [ 223.791333][ T5] flags: 0x1fffc0000000200(slab) [ 223.796260][ T5] raw: 01fffc0000000200 ffffea000264f8c8 ffffea0002449b48 ffff8880aa400c40 [ 223.804836][ T5] raw: 0000000000000000 ffff888095983000 0000000100000002 0000000000000000 [ 223.813401][ T5] page dumped because: kasan: bad access detected [ 223.819798][ T5] [ 223.822104][ T5] Memory state around the buggy address: [ 223.827715][ T5] ffff888095982f00: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 223.835755][ T5] ffff888095982f80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 223.843804][ T5] >ffff888095983000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 223.851850][ T5] ^ [ 223.856683][ T5] ffff888095983080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 223.864725][ T5] ffff888095983100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 223.872768][ T5] ================================================================== [ 223.880801][ T5] Disabling lock debugging due to kernel taint [ 223.889403][ T5] Kernel panic - not syncing: panic_on_warn set ... [ 223.896015][ T5] CPU: 0 PID: 5 Comm: kworker/0:0 Tainted: G B 5.4.0-rc2+ #0 [ 223.904673][ T5] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 223.907191][ T9815] kobject: 'loop0' (00000000e3bb1dd4): kobject_uevent_env [ 223.914750][ T5] Workqueue: krxrpcd rxrpc_peer_keepalive_worker [ 223.914758][ T5] Call Trace: [ 223.914776][ T5] dump_stack+0x172/0x1f0 [ 223.914790][ T5] panic+0x2e3/0x75c [ 223.914806][ T5] ? add_taint.cold+0x16/0x16 [ 223.922280][ T9815] kobject: 'loop0' (00000000e3bb1dd4): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 223.928214][ T5] ? rxrpc_send_keepalive+0x8a2/0x940 [ 223.928229][ T5] ? preempt_schedule+0x4b/0x60 [ 223.928245][ T5] ? ___preempt_schedule+0x16/0x20 [ 223.928263][ T5] ? trace_hardirqs_on+0x5e/0x240 [ 223.974801][ T5] ? rxrpc_send_keepalive+0x8a2/0x940 [ 223.980179][ T5] end_report+0x47/0x4f [ 223.980388][ T3892] kobject: 'loop4' (0000000066d9ea6a): kobject_uevent_env [ 223.984329][ T5] ? rxrpc_send_keepalive+0x8a2/0x940 [ 223.996807][ T5] __kasan_report.cold+0xe/0x41 [ 224.001674][ T5] ? rxrpc_send_keepalive+0x8a2/0x940 [ 224.007048][ T5] kasan_report+0x12/0x20 [ 224.011384][ T5] __asan_report_load8_noabort+0x14/0x20 [ 224.017017][ T5] rxrpc_send_keepalive+0x8a2/0x940 [ 224.022219][ T5] ? rxrpc_reject_packets+0xab0/0xab0 [ 224.027590][ T5] ? __kasan_check_read+0x11/0x20 [ 224.032616][ T5] ? mark_lock+0xc2/0x1220 [ 224.037030][ T5] ? find_held_lock+0x35/0x130 [ 224.041798][ T5] ? mark_held_locks+0xa4/0xf0 [ 224.046565][ T5] ? _raw_spin_unlock_bh+0x31/0x40 [ 224.051675][ T5] ? __local_bh_enable_ip+0x15a/0x270 14:50:46 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0xffffffff}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 14:50:46 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 224.054941][ T3892] kobject: 'loop4' (0000000066d9ea6a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 224.057049][ T5] ? lockdep_hardirqs_on+0x421/0x5e0 [ 224.057069][ T5] ? rxrpc_peer_keepalive_worker+0x62e/0xd02 [ 224.078421][ T5] ? trace_hardirqs_on+0x67/0x240 [ 224.083447][ T5] ? rxrpc_peer_keepalive_worker+0x62e/0xd02 [ 224.089431][ T5] ? __local_bh_enable_ip+0x15a/0x270 [ 224.094807][ T5] rxrpc_peer_keepalive_worker+0x7be/0xd02 [ 224.100622][ T5] ? rxrpc_peer_add_rtt+0x650/0x650 [ 224.105817][ T5] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 224.111368][ T5] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 224.117343][ T5] ? trace_hardirqs_on+0x67/0x240 [ 224.122372][ T5] process_one_work+0x9af/0x1740 [ 224.125256][ T3892] kobject: 'loop2' (00000000dd26181a): kobject_uevent_env [ 224.127310][ T5] ? pwq_dec_nr_in_flight+0x320/0x320 [ 224.127328][ T5] ? lock_acquire+0x190/0x410 [ 224.141366][ T3892] kobject: 'loop2' (00000000dd26181a): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 224.144452][ T5] worker_thread+0x98/0xe40 [ 224.144479][ T5] kthread+0x361/0x430 [ 224.163140][ T5] ? process_one_work+0x1740/0x1740 [ 224.168336][ T5] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 224.174579][ T5] ret_from_fork+0x24/0x30 [ 224.180455][ T5] Kernel Offset: disabled [ 224.184776][ T5] Rebooting in 86400 seconds..