_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbff00005421, &(0x7f0000000000)) 02:22:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbff00005450, &(0x7f0000000000)) 02:22:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x40000000) 02:22:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbff00005451, &(0x7f0000000000)) 02:22:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:22:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbff00005452, &(0x7f0000000000)) 02:22:37 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e101000000000000004137"], 0x4b}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:22:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x920b0000) 02:22:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbff00005460, &(0x7f0000000000)) 02:22:38 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 02:22:38 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbff40049409, &(0x7f0000000000)) 02:22:38 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e10100000000000000413746"], 0x4c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:22:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe8030000) 02:22:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbff40086602, &(0x7f0000000000)) 02:22:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:22:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbff40087602, &(0x7f0000000000)) 02:22:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffff8000) 02:22:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbff4020940d, &(0x7f0000000000)) 02:22:38 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e10100000000000000413746"], 0x4c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:22:38 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:38 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbff80086601, &(0x7f0000000000)) 02:22:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x8000000000) 02:22:39 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e10100000000000000413746"], 0x4c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:22:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbff80087601, &(0x7f0000000000)) 02:22:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7fe91fa47700) 02:22:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:22:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xc0045878, &(0x7f0000000000)) 02:22:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbffc0045878, &(0x7f0000000000)) 02:22:39 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:22:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc000000000000) 02:22:40 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:40 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbffc0189436, &(0x7f0000000000)) 02:22:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x10000000000000) 02:22:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbffc020660b, &(0x7f0000000000)) 02:22:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:22:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbfffff3ffc9, &(0x7f0000000000)) 02:22:40 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:22:40 executing program 1: request_key(&(0x7f0000000040)='.request_key_auth\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='/dev/dri/card#\x00', 0x0) r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000140)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r0) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r0, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000001d80)={'syz', 0x1, 0x2e}, r1) keyctl$clear(0x7, r1) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r2, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:22:41 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x60000000000000) 02:22:41 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:41 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:22:41 executing program 1: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000580)={0x1, [0x0]}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r2, 0x0, 0x2}, 0xc) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB="b2000000ee1ba2864b1efab207d8021df1a78524ddc94bf74f95fcb1ad9fd6a78e9a54f459dc44f8f6c55c3b06456cb906eca5c6ce81b5d46df57960b2ac9b59000e123ccc1c39ae293c276f10a08de3541c71e847721667cb9d01fcbbe0239064dbf57adb91147cc175b1084fb3cb0e3189025008cef8c20ebd4698b73a55f2fb90aab304236086c14bfd91f9a1cee5063fce06701fd57c369c3794860d2cfb92182c91277d72dc5fb71f3c253930ebb87ec7bcc333"], &(0x7f0000000300)=0xba) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r3, 0x7b5}, &(0x7f0000000380)=0x8) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(0xffffffffffffffff, 0xfffffbfffff3ffa3, &(0x7f0000000000)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0}]}) r5 = socket$inet(0x2, 0xa, 0x0) getsockname$inet(r5, 0x0, &(0x7f0000000380)) recvfrom(r5, &(0x7f0000000480)=""/250, 0xfa, 0x20, 0x0, 0x0) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000200)={r4, 0x2, &(0x7f00000000c0)=[0x99, 0x6], &(0x7f0000000140)=[0x3, 0x7f, 0x4300], 0x10, 0x3, 0xff, &(0x7f0000000180)=[0x9, 0x7fff, 0x2], &(0x7f00000001c0)=[0x20, 0x81, 0x1]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x80000, 0x0) fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000400)='trusted.overlay.origin\x00', &(0x7f0000000440)='y\x00', 0x2, 0x1) 02:22:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x68000000000000) 02:22:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:22:41 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf25130200006000070008000100020000000c000300020000000000000008000100ffffffff0c0003000000000000000000080002000509000008000100d23100000c00030050000000000000000c00a56768e0e9afa15600000c000300050000000000000014000900080001000600000008000100400000000c0002000800010080d90000380101001c00020008000400060000000800030034a4ffff08000100160000001000010069623a767863616e310000005400020008000300090000000800020019000000080002000100000008000200400000000800020007000000080004000100000008000200040000000800030003000000080004000600000008000400090000001000010069623a766574683000000000100001007564703a73797a30000000001400020008000200040e00000800020007000000440002000800020001000000080003000100008008000400f7ffffff080001000000000008000400000000000800040000f0ffff080001000300000008000300ff0700002c0004001400010002004e22e000000100000000000000001400020002004e20ffffffff0000000000000000100001007564703a73797a3000000000a793533f72b1a3d8793e0cf5ff15cdbc76765d1a72698a151a3acb060cca68ae596fa831282b51fe91c7e12b38271943071e7fea086f55b0f60c857477e33af6b3119f239a9a4d7590a141b52ae3797830ae81e673fa9f3e93d8bdb3fb90f9f8e49da782fe06825c363076cd90b1ad28c50b2f69ed48d0771fad8b54efc7598bd6f412f8ec28922f48da266e6de98b66d0919e3b9424b7bbde04c7aeaeaaac0bd06be7562797fe32fc9bef670ee75082f12370e54d6f43ff98e9a83a318f747c3d391c064c502daeeacac906288ba5232e550b31488e3d195a8746ab8b7631e0666796c64ac346b36a5d72d063b5dbdc7e5b85a7840eac7cc983635eca63"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:41 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:22:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x77a41fe97f0000) 02:22:42 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf25130200006000070008000100020000000c000300020000000000000008000100ffffffff0c0003000000000000000000080002000509000008000100d23100000c00030050000000000000000c00a56768e0e9afa15600000c000300050000000000000014000900080001000600000008000100400000000c0002000800010080d90000380101001c00020008000400060000000800030034a4ffff08000100160000001000010069623a767863616e310000005400020008000300090000000800020019000000080002000100000008000200400000000800020007000000080004000100000008000200040000000800030003000000080004000600000008000400090000001000010069623a766574683000000000100001007564703a73797a30000000001400020008000200040e00000800020007000000440002000800020001000000080003000100008008000400f7ffffff080001000000000008000400000000000800040000f0ffff080001000300000008000300ff0700002c0004001400010002004e22e000000100000000000000001400020002004e20ffffffff0000000000000000100001007564703a73797a3000000000a793533f72b1a3d8793e0cf5ff15cdbc76765d1a72698a151a3acb060cca68ae596fa831282b51fe91c7e12b38271943071e7fea086f55b0f60c857477e33af6b3119f239a9a4d7590a141b52ae3797830ae81e673fa9f3e93d8bdb3fb90f9f8e49da782fe06825c363076cd90b1ad28c50b2f69ed48d0771fad8b54efc7598bd6f412f8ec28922f48da266e6de98b66d0919e3b9424b7bbde04c7aeaeaaac0bd06be7562797fe32fc9bef670ee75082f12370e54d6f43ff98e9a83a318f747c3d391c064c502daeeacac906288ba5232e55"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x480800, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000140)={{{@in=@local, @in=@initdev}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000080)=0xe8) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:22:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x80ffff00000000) 02:22:42 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf25130200006000070008000100020000000c000300020000000000000008000100ffffffff0c0003000000000000000000080002000509000008000100d23100000c00030050000000000000000c00a56768e0e9afa15600000c000300050000000000000014000900080001000600000008000100400000000c0002000800010080d90000380101001c00020008000400060000000800030034a4ffff08000100160000001000010069623a767863616e310000005400020008000300090000000800020019000000080002000100000008000200400000000800020007000000080004000100000008000200040000000800030003000000080004000600000008000400090000001000010069623a766574683000000000100001007564703a73797a30000000001400020008000200040e00000800020007000000440002000800020001000000080003000100008008000400f7ffffff080001000000000008000400000000000800040000f0ffff080001000300000008000300ff0700002c0004001400010002004e22e000000100000000000000001400020002004e20ffffffff0000000000000000100001007564703a73797a3000000000a793533f72b1a3d8793e0cf5ff15cdbc76765d1a72698a151a3acb060cca68ae596fa831282b51fe91c7e12b38271943071e7fea086f55b0f60c857477e33af6b3119f239a9a4d7590a141b52ae3797830ae81e673fa9f3e93d8bdb3fb90f9f8e49da782fe06825c363076cd90b1ad28c50b2f69ed48d0771fad8b54efc7598bd6f412f8ec28922f48da266e6de98b66d0919e3b9424b7bbde04c7aeaeaaac0bd06be7562797fe32fc9bef670ee75082f12370e54d6f43ff98e9a83a318f747c3d391c064c502daeeacac906288ba5232e550b31488e3d195a8746ab8b7631e0666796c64ac346b36a5d72d063b5dbdc7e5b85a7840eac7cc983635eca63"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:22:42 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:22:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) r1 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0xfffffffe, 0xa86e5875a32c8560) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r2, &(0x7f0000001380)=[{&(0x7f0000001100)="d2", 0x1}], 0x1) recvmmsg(r2, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x0, 0x0, 0x2, {0xa, 0x4e24, 0x6, @empty, 0x1}}}, 0x32) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:22:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xec0f0000000000) 02:22:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xd2, 0x200) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:22:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0xfe) getsockname$inet(r1, 0x0, &(0x7f0000000040)) fcntl$addseals(r1, 0x409, 0xa) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:22:43 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:22:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x100000000000000) 02:22:43 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:22:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) r1 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, 0x0) ioctl$TCGETX(r1, 0x5432, &(0x7f0000000040)) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:22:43 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) r1 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000080)={'nat\x00', 0x54, "edd6675f3e96112ae6d92255b98ea1083a6df3d0ee0b55a8dbcdb95717be2add7d7c139a77689065d5e5526dc6febb469fa2705952fdb0b988736053a7c06a3313d996c065729856e2bb53d746af3a8c4a81dc57"}, &(0x7f0000000180)=0x78) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x0, 0x8, 0xe7f, 0x1000, 0x6, 0x81, 0xfffffffa}, 0x1c) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:22:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:22:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x100008000000000) 02:22:43 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:22:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:22:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, 0x0, 0x0) 02:22:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x200000000000000) 02:22:44 executing program 1: r0 = shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000180)=0xc) setuid(r2) r3 = getegid() mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB="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", @ANYRESDEC=r3, @ANYBLOB='8']) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = getpgrp(0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x100000001, r2, r3}, 0x0, 0x67c2, 0x5, 0x1, r4, r5, 0x7fff}) fstat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) setresuid(r2, r6, r9) r10 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r10, 0xfffffbfffff3ffa3, &(0x7f0000000000)) r11 = shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) r12 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000180)=0xc) setuid(r13) r14 = getegid() mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESDEC=r14, @ANYBLOB='8']) r15 = getpid() sched_setscheduler(r15, 0x5, &(0x7f0000000380)) r16 = getpgrp(0x0) shmctl$IPC_SET(r11, 0x1, &(0x7f0000000000)={{0x100000001, r13, r14}, 0x0, 0x67c2, 0x5, 0x1, r15, r16, 0x7fff}) r17 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r18) r19 = shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000180)=0xc) setuid(r21) r22 = getegid() mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESDEC=r22, @ANYBLOB='8']) r23 = getpid() sched_setscheduler(r23, 0x5, &(0x7f0000000380)) r24 = getpgrp(0x0) shmctl$IPC_SET(r19, 0x1, &(0x7f0000000000)={{0x100000001, r21, r22}, 0x0, 0x67c2, 0x5, 0x1, r23, r24, 0x7fff}) r25 = shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) r26 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000180)=0xc) setuid(r27) r28 = getegid() mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT=r15, @ANYPTR]) r29 = getpid() sched_setscheduler(r29, 0x5, &(0x7f0000000380)) r30 = getpgrp(0x0) shmctl$IPC_SET(r25, 0x1, &(0x7f0000000000)={{0x100000001, r27, r28}, 0x0, 0x67c2, 0x5, 0x1, r29, r30, 0x7fff}) shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) r31 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r31, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000180)=0xc) setuid(r32) r33 = getegid() mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESDEC=r33, @ANYBLOB='8']) r34 = getpid() sched_setscheduler(r34, 0x5, &(0x7f0000000380)) getpgrp(0x0) r35 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffb000/0x1000)=nil) r36 = shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) r37 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000180)=0xc) setuid(r38) r39 = getegid() mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYBLOB, @ANYRESDEC=r39, @ANYBLOB='8']) r40 = getpid() sched_setscheduler(r40, 0x5, &(0x7f0000000380)) r41 = getpgrp(0x0) shmctl$IPC_SET(r36, 0x1, &(0x7f0000000000)={{0x100000001, r38, r39}, 0x0, 0x67c2, 0x5, 0x1, r40, r41, 0x7fff}) shmctl$IPC_SET(r35, 0x1, &(0x7f00000002c0)={{0x100000001, r32, r33, 0x0, 0x0, 0xbf}, 0xffffffe1, 0x67c2, 0x5, 0x1, r34, r41, 0x8}) getgroups(0x6, &(0x7f00000000c0)=[r3, r7, r22, 0xffffffffffffffff, r28, r33]) r43 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r44) r45 = gettid() shmctl$IPC_SET(r11, 0x1, &(0x7f00000001c0)={{0x146f4000, r18, r42, r44, r7, 0x0, 0x3}, 0x9, 0x4, 0x3, 0x6, r45, 0x0, 0x75}) 02:22:44 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, 0x0, 0x0) 02:22:44 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:22:44 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)={0x11d1, 0x100, 0x1ff, 0x8}) r2 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x20000, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, 0x0) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000000200)) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:22:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x208000000000000) 02:22:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, 0x0, 0x0) 02:22:44 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000440)=0x7, 0x1009d) write(r1, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:22:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x240000000000000) 02:22:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x2}, 0x0) 02:22:45 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:22:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x2}, 0x0) 02:22:45 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x20000, 0x0) accept4$unix(r1, &(0x7f0000000080)=@abs, &(0x7f0000000140)=0x6e, 0x80000) 02:22:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x248000000000000) 02:22:45 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x2}, 0x0) 02:22:45 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:22:45 executing program 1: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001200)='/selinux/status\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @remote}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000001240)=r5) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r0, &(0x7f0000001380)=[{&(0x7f0000001100)="d2", 0x1}], 0x1) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000001140)="55236e02ee8bcf4215090817df2cad0c51b92e78a03a77e0c50317c114f35cb7215668255353484d1befc30a6d69ce7835426abfbdd9a7222d32e38b2036bf328d24c0942320b9ffe64e41f595d1424948b359f54d52e3080d95d06e203c730461d5ac288692b7f451e4c283c58300110592a8db82754fe8bfc19aaa6773ad0e57695e7533ff7ce3a16c731cddf34cafd5b5c56a8eb5213db83f0000000000000000") r6 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r6, 0x8927, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r7, 0x4b69, &(0x7f0000000140)=""/4096) r8 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x41) ioctl$SIOCGIFHWADDR(r8, 0x8927, 0x0) ioctl$IOC_PR_REGISTER(r8, 0x401870c8, &(0x7f0000000080)={0x3, 0xb5c}) 02:22:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0x80, 0x0}, 0x0) 02:22:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x268000000000000) 02:22:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0x80, 0x0}, 0x0) 02:22:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000040)={0x0, 0x1}) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) r1 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/251}) 02:22:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x800, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:22:46 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x300000000000000) 02:22:46 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:22:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0x80, 0x0}, 0x0) 02:22:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0x4000009, &(0x7f0000000080)="a20c7a99b18e95c8d2f01b207ee4bf8bb874bcbef8d3bf47fccda69aea922b87b6b078b975d2d3b0b14feec41733") 02:22:46 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000080)=0x1) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:22:46 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:22:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x400000000000000) 02:22:47 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, 0x0) sendmsg$key(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x13, 0x7f, 0x2, 0x1f, 0x0, 0x70bd27, 0x25dfdbfd, [@sadb_x_sa2={0x2, 0x13, 0x55, 0x0, 0x0, 0x70bd2d, 0x3504}, @sadb_key={0x7, 0x10, 0x170, 0x0, "9bbe1e9c17f7d032b56c7766efbf94aea4cc8236a50f64419d9652bc12955df574bbd1755fc7d4a8f782146def88"}, @sadb_x_sec_ctx={0x6, 0x18, 0x0, 0x22, 0x84, "704560c8ecb898f5125f6677a35dda0a9a558227b73c7a57b2c1bb6fd55508f7b1ee4dca08d5ec35b0e51e3660e58c4c333e69f2fff9953489f2b5fe5181874cbe641c8bf7bb8956e7efd3ce79d64b910e765dcf8df81f57a7fc1e3807cf5ba7a55055bf2b9f7efa061c8637e921c5400b9568a15ceda4d1bb67e1f7aa0cbd77740df072"}, @sadb_sa={0x2, 0x1, 0x4d3, 0x1, 0xab, 0xa5, 0x0, 0x60000001}]}, 0xf8}}, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r2, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:22:47 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:22:47 executing program 3 (fault-call:6 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:22:47 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x440000000000000) 02:22:47 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:22:48 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:22:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can={0x1d}, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:22:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x7, 0x80) accept4$bt_l2cap(r1, 0x0, &(0x7f0000000080), 0x80000) r2 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f00000004c0)=0xfffffff8) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000140)=0x0) io_submit(r5, 0x2, &(0x7f0000000480)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x0, r4, 0x0, 0x2}]) io_pgetevents(r5, 0x7fffffff, 0xa, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400)={0x77359400}, &(0x7f0000000480)={&(0x7f0000000440)={0x1}, 0x8}) sendto$rose(0xffffffffffffffff, &(0x7f0000000140)="77c9ac7c2fc62ef20209099b80029af18f4c2b66a48c82bfc0485b084d3f3d0801e8f68bb925a0ecc09e24a93d9e1bb1b3e2ed8ea72ffc58bd7aac28e3e115c2faa2af08b24a43ab4f4815c11de30f1cf7f0734c0c9c15a15adbc1db43fd8a5fb0cb7dfdbb7828298ccf295123157ff49f7416926e4856201909b60f48db7f0784429f2f2b4d5c2fb2da4c2658c25207a2e7362045e3a60efab3dfb9fe1720e124a8e3ecb941cdc43549b8af80fef10a3cac0d24e87827394e45c4861eab748ad5834774a7859a5c439abcddae14ecb02e7c4fee62335a2c17d3b0a0de88ae59550df1eced3b", 0xe6, 0x8000, &(0x7f00000000c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) 02:22:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x460000000000000) 02:22:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can={0x1d}, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:22:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = fcntl$getown(r0, 0x9) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x4, &(0x7f0000000140)=""/196) r2 = open(&(0x7f0000000040)='./bus\x00', 0x50e8086b5d41ff94, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, 0x0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:22:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can={0x1d}, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:22:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x468000000000000) 02:22:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can={0x1d}, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:22:48 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:49 executing program 1: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) r0 = socket$inet(0x2, 0xa, 0x0) getsockname$inet(r0, 0x0, &(0x7f0000000380)) ioctl(r0, 0x5, &(0x7f0000000200)="b6779002374437c3665befe185edf2f9df4602790a6aeea83c819a1af787cd2c9a18b5b8f068739742afd1e517d5f0a3d2a53998145b8679fb2cb9612bb93752358aaff482d299131bb12650fdaccf266be34d71c8407abf5246583fa53547ee43d3cc2224d9a4ed0fd1b1ef3fa1ff2b844e91ea3da9cc090f0e393a4a7f26cebcb97ae1c71b377c2964cfb01c4421162e1f22490e2233ab16f445d2f56c6bc7b7f6bc3dd4ce987618925c4acfe635772c618833145f167b2156511986bd0aefcbe2dad52cd0913aaacb838bf21ad3fb05e54132420a6d921f9c18f71b4bb6b2a2a8843de2a60783") 02:22:49 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:22:49 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf25130200006000070008000100020000000c000300020000000000000008000100ffffffff0c0003000000000000000000080002000509000008000100d23100000c00030050000000000000000c00a56768e0e9afa15600000c000300050000000000000014000900080001000600000008000100400000000c0002000800010080d90000380101001c00020008000400060000000800030034a4ffff08000100160000001000010069623a767863616e310000005400020008000300090000000800020019000000080002000100000008000200400000000800020007000000080004000100000008000200040000000800030003000000080004000600000008000400090000001000010069623a766574683000000000100001007564703a73797a30000000001400020008000200040e00000800020007000000440002000800020001000000080003000100008008000400f7ffffff080001000000000008000400000000000800040000f0ffff080001000300000008000300ff0700002c0004001400010002004e22e000000100000000000000001400020002004e20ffffffff0000000000000000100001007564703a73797a3000000000a793533f72b1a3d8793e0cf5ff15cdbc76765d1a72698a151a3acb060cca68ae596fa831282b51fe91c7e12b38271943071e7fea086f55b0f60c857477e33af6b3119f239a9a4d7590a141b52ae3797830ae81e673fa9f3e93d8bdb3fb90f9f8e49da782fe06825c363076cd90b1ad28c50b2f69ed48d0771fad8b54efc7598bd6f412f8ec28922f48da266e6de98b66d0919e3b9424b7bbde04c7aeaeaaac0bd06be7562797fe32fc9bef670ee75082f12370e54d6f43ff98e9a83a318f747c3d391c064c502daeeacac906288ba5232e550b31488e3d195a8746ab8b7631e0666796c64ac346b36a5d72d063b5dbdc7e5b85"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x500000000000000) 02:22:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x42, 0x4e240) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:22:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can={0x1d}, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:22:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x800) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:22:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f0000001380)=[{&(0x7f0000001100)="d2", 0x1}], 0x1) recvmmsg(r1, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000140)=""/233, 0xe9}, {&(0x7f0000000040)=""/126, 0x7e}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f00000002c0)=""/157, 0x9d}, {&(0x7f00000000c0)=""/33, 0x21}], 0x5) 02:22:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x660000000000000) 02:22:49 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:22:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:22:50 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf25130200006000070008000100020000000c000300020000000000000008000100ffffffff0c0003000000000000000000080002000509000008000100d23100000c00030050000000000000000c00a56768e0e9afa15600000c000300050000000000000014000900080001000600000008000100400000000c0002000800010080d90000380101001c00020008000400060000000800030034a4ffff08000100160000001000010069623a767863616e310000005400020008000300090000000800020019000000080002000100000008000200400000000800020007000000080004000100000008000200040000000800030003000000080004000600000008000400090000001000010069623a766574683000000000100001007564703a73797a30000000001400020008000200040e00000800020007000000440002000800020001000000080003000100008008000400f7ffffff080001000000000008000400000000000800040000f0ffff080001000300000008000300ff0700002c0004001400010002004e22e000000100000000000000001400020002004e20ffffffff0000000000000000100001007564703a73797a3000000000a793533f72b1a3d8793e0cf5ff15cdbc76765d1a72698a151a3acb060cca68ae596fa831282b51fe91c7e12b38271943071e7fea086f55b0f60c857477e33af6b3119f239a9a4d7590a141b52ae3797830ae81e673fa9f3e93d8bdb3fb90f9f8e49da782fe06825c363076cd90b1ad28c50b2f69ed48d0771fad8b54efc7598bd6f412f8ec28922f48da266e6de98b66d0919e3b9424b7bbde04c7aeaeaaac0bd06be7562797fe32fc9bef670ee75082f12370e54d6f43ff98e9a83a318f747c3d391c064c502daeeacac906288ba5232e550b31488e3d195a8746ab8b7631e0666796c64ac346b36a5d72d063b5dbdc7e5b85a7840eac7cc983635eca63"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/\xcb\xefQ6card#\x00', 0x5, 0x42480) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x80000, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, 0x0) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000040)={0x0, 0x5}) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) removexattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=@random={'system.', '/dev/\xcb\xefQ6card#\x00'}) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:22:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:22:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x668000000000000) 02:22:50 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:50 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:22:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:22:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x66c000000000000) 02:22:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) r1 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r4, 0x8927, 0x0) r5 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r5, 0x8927, 0x0) ioctl$TIOCSCTTY(r1, 0x540e, 0x4000000000006) r6 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x3, 0x80) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, &(0x7f0000000540)={0x3, &(0x7f0000000380)=[{}, {}, {}]}) r7 = socket$inet6(0xa, 0x0, 0x0) read(r2, 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, 0x0) r8 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r8, 0x8927, 0x0) fsetxattr$security_capability(r7, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000180)=@v2={0x2000000, [{0xffff9710, 0x101}, {0x32, 0x2}]}, 0x14, 0x2) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f00000001c0)) timer_create(0x7, &(0x7f0000000300)={0x0, 0x35, 0x1, @thr={&(0x7f0000000200), &(0x7f0000000240)="697c064a429746538eafa89841d4508ee5ac12f5206d210d0da64e123854ca4e3e42f176cae5fd5fd42ff046ba4e61363b32b76ddd620914877eae7079458f5b318ec4c947e949d444c29a1160fd2f227db77d6949a7243eb8ade7b8f43fb9e629748c0e3b898862b9d168ebb7976416c842f9b918dfc3e46418330e8e27eef8b358098df9191bef6caff47ceb86d873912bc096a414"}}, &(0x7f0000000340)=0x0) r10 = socket$unix(0x1, 0x2, 0x0) bind$unix(r10, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r10, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r10, &(0x7f0000001380)=[{&(0x7f0000001100)="d2", 0x1}], 0x1) recvmmsg(r10, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) r11 = accept4(r10, &(0x7f0000000580)=@pppoe, &(0x7f0000000600)=0x80, 0x80000) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r11, 0x84, 0x7, &(0x7f0000000640)={0xfff}, 0x4) timer_getoverrun(r9) setsockopt$bt_BT_SNDMTU(r8, 0x112, 0xc, &(0x7f0000000040)=0xff81, 0x2) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) [ 413.723525] serio: Serial port ptm0 02:22:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) [ 413.911493] serio: Serial port ptm0 02:22:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x700000000000000) 02:22:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0xdd56c0c2c24a6eaf) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14, 0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000200)={'team0\x00', r2}) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x202a80, 0x0) 02:22:51 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf25130200006000070008000100020000000c000300020000000000000008000100ffffffff0c0003000000000000000000080002000509000008000100d23100000c00030050000000000000000c00a56768e0e9afa15600000c000300050000000000000014000900080001000600000008000100400000000c0002000800010080d90000380101001c00020008000400060000000800030034a4ffff08000100160000001000010069623a767863616e310000005400020008000300090000000800020019000000080002000100000008000200400000000800020007000000080004000100000008000200040000000800030003000000080004000600000008000400090000001000010069623a766574683000000000100001007564703a73797a30000000001400020008000200040e00000800020007000000440002000800020001000000080003000100008008000400f7ffffff080001000000000008000400000000000800040000f0ffff080001000300000008000300ff0700002c0004001400010002004e22e000000100000000000000001400020002004e20ffffffff0000000000000000100001007564703a73797a3000000000a793533f72b1a3d8793e0cf5ff15cdbc76765d1a72698a151a3acb060cca68ae596fa831282b51fe91c7e12b38271943071e7fea086f55b0f60c857477e33af6b3119f239a9a4d7590a141b52ae3797830ae81e673fa9f3e93d8bdb3fb90f9f8e49da782fe06825c363076cd90b1ad28c50b2f69ed48d0771fad8b54efc7598bd6f412f8ec28922f48da266e6de98b66d0919e3b9424b7bbde04c7aeaeaaac0bd06be7562797fe32fc9bef670ee75082f12370e54d6f43ff98e9a83a318f747c3d391c064c502daeeacac906288ba5232e550b31488e3d195a8746ab8b7631e0666796c64ac346b36a5d72d063b5dbdc7e5b85a7840eac7cc983635eca63"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:22:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='\x02\x00\x00\x00\x00/card#\x00', 0x1, 0x22700) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:22:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x800000000000000) 02:22:51 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf25130200006000070008000100020000000c000300020000000000000008000100ffffffff0c0003000000000000000000080002000509000008000100d23100000c00030050000000000000000c00a56768e0e9afa15600000c000300050000000000000014000900080001000600000008000100400000000c0002000800010080d90000380101001c00020008000400060000000800030034a4ffff08000100160000001000010069623a767863616e310000005400020008000300090000000800020019000000080002000100000008000200400000000800020007000000080004000100000008000200040000000800030003000000080004000600000008000400090000001000010069623a766574683000000000100001007564703a73797a30000000001400020008000200040e00000800020007000000440002000800020001000000080003000100008008000400f7ffffff080001000000000008000400000000000800040000f0ffff080001000300000008000300ff0700002c0004001400010002004e22e000000100000000000000001400020002004e20ffffffff0000000000000000100001007564703a73797a3000000000a793533f72b1a3d8793e0cf5ff15cdbc76765d1a72698a151a3acb060cca68ae596fa831282b51fe91c7e12b38271943071e7fea086f55b0f60c857477e33af6b3119f239a9a4d7590a141b52ae3797830ae81e673fa9f3e93d8bdb3fb90f9f8e49da782fe06825c363076cd90b1ad28c50b2f69ed48d0771fad8b54efc7598bd6f412f8ec28922f48da266e6de98b66d0919e3b9424b7bbde04c7aeaeaaac0bd06be7562797fe32fc9bef670ee75082f12370e54d6f43ff98e9a83a318f747c3d391c064c502daeeacac906288ba5232e550b31488e3d195a8746ab8b7631e0666796c64ac346b36a5d72d063b5dbdc7e5b85a7840eac7cc9"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:51 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:22:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='od\x06\x00\x00\x00\x00\x00\t\x00\a\x00', 0x101, 0x1c82) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:22:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x4, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:22:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000040)=0xff, 0xfffffffffffffe0f) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9ceb, 0x68376a5be94d052b) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000080)={0x0, 0x0, {0x40, 0xee26, 0x8001, 0x1}}) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:22:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x80c000000000000) 02:22:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x40000, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:22:52 executing program 1: openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) getsockname$inet(r0, 0x0, &(0x7f0000000380)) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5e0, 0x228, 0x228, 0x138, 0x408, 0x0, 0x548, 0x548, 0x548, 0x548, 0x548, 0x6, &(0x7f0000000080), {[{{@uncond, 0x0, 0x108, 0x138, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0xff, [0x6, 0x1f, 0x1000, 0x7, 0x8, 0x8], 0x0, 0x9}}}, @common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x200, 0x104, 0x0, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xd5e, 0x0, @multicast2, 0x4e23}}}, {{@ip={@broadcast, @multicast2, 0xffffffff, 0xffffff00, 'team_slave_1\x00', 'gre0\x00', {0xff}, {0xff}, 0x8, 0x6, 0x2}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x808, 0xa00, 0x1}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@time={0x38, 'time\x00', 0x0, {0x4, 0x5, 0xb615, 0xf4e0, 0xf5b, 0x7, 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x31, 0x1, 0x1}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x12}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x5, 0x1f}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xa0a8e042fcce7532, 0xffffff00, 'syzkaller0\x00', 'syz_tun\x00', {}, {0x117040971eda123c}, 0x0, 0x7, 0x30}, 0x0, 0x110, 0x140, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}, @common=@inet=@set3={0x50, 'set\x00', 0x3, {{0x6, 0x8, 0x6}, {0x5, 0xfffffffffffffffc}, {0x1, 0x400}, 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x400, 0x3, 0x2}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x640) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r1, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:22:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x1000000, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:22:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x868000000000000) 02:22:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x8, 0x200480) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x81, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @remote}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={@rand_addr="30cad1c5b1c0cfe377c0eb43fa35fdcc", 0x3, r5}) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:22:52 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf25130200006000070008000100020000000c000300020000000000000008000100ffffffff0c0003000000000000000000080002000509000008000100d23100000c00030050000000000000000c00a56768e0e9afa15600000c000300050000000000000014000900080001000600000008000100400000000c0002000800010080d90000380101001c00020008000400060000000800030034a4ffff08000100160000001000010069623a767863616e310000005400020008000300090000000800020019000000080002000100000008000200400000000800020007000000080004000100000008000200040000000800030003000000080004000600000008000400090000001000010069623a766574683000000000100001007564703a73797a30000000001400020008000200040e00000800020007000000440002000800020001000000080003000100008008000400f7ffffff080001000000000008000400000000000800040000f0ffff080001000300000008000300ff0700002c0004001400010002004e22e000000100000000000000001400020002004e20ffffffff0000000000000000100001007564703a73797a3000000000a793533f72b1a3d8793e0cf5ff15cdbc76765d1a72698a151a3acb060cca68ae596fa831282b51fe91c7e12b38271943071e7fea086f55b0f60c857477e33af6b3119f239a9a4d7590a141b52ae3797830ae81e673fa9f3e93d8bdb3fb90f9f8e49da782fe06825c363076cd90b1ad28c50b2f69ed48d0771fad8b54efc7598bd6f412f8ec28922f48da266e6de98b66d0919e3b9424b7bbde04c7aeaeaaac0bd06be7562797fe32fc9bef670ee75082f12370e54d6f43ff98e9a83a318f747c3d391c064c502daeeacac906288ba5232e550b31488e3d195a8746ab8b7631e0666796c64ac346b36a5d72d063b5dbdc7e5b85a7840eac7cc9"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:52 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:22:52 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x4000000000000, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:22:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) r1 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x45, &(0x7f0000000040)="21c8bc39c7b03ffd598f035b5f98841e0b60b2a1fa534f8064a66ba66082eba20fb57f11cdb8f32ae6f854d1cc667d7e87fc35cbe6", 0x35) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:22:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x86c000000000000) 02:22:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x100000000000000, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:22:53 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x0, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:22:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x37}, 0x0) 02:22:53 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x900000000000000) 02:22:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x200004f8}, 0x0) 02:22:53 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x0, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:22:53 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38, 0x4}, 0x0) 02:22:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xa0c000000000000) 02:22:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38, 0x40000}, 0x0) 02:22:54 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x0, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:22:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc00000000000000) 02:22:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38, 0x1000000}, 0x0) 02:22:54 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:22:54 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX]) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38, 0x4000000000000}, 0x0) 02:22:54 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf25130200006000070008000100020000000c000300020000000000000008000100ffffffff0c0003000000000000000000080002000509000008000100d23100000c00030050000000000000000c00a56768e0e9afa15600000c000300050000000000000014000900080001000600000008000100400000000c0002000800010080d90000380101001c00020008000400060000000800030034a4ffff08000100160000001000010069623a767863616e310000005400020008000300090000000800020019000000080002000100000008000200400000000800020007000000080004000100000008000200040000000800030003000000080004000600000008000400090000001000010069623a766574683000000000100001007564703a73797a30000000001400020008000200040e00000800020007000000440002000800020001000000080003000100008008000400f7ffffff080001000000000008000400000000000800040000f0ffff080001000300000008000300ff0700002c0004001400010002004e22e000000100000000000000001400020002004e20ffffffff0000000000000000100001007564703a73797a3000000000a793533f72b1a3d8793e0cf5ff15cdbc76765d1a72698a151a3acb060cca68ae596fa831282b51fe91c7e12b38271943071e7fea086f55b0f60c857477e33af6b3119f239a9a4d7590a141b52ae3797830ae81e673fa9f3e93d8bdb3fb90f9f8e49da782fe06825c363076cd90b1ad28c50b2f69ed48d0771fad8b54efc7598bd6f412f8ec28922f48da266e6de98b66d0919e3b9424b7bbde04c7aeaeaaac0bd06be7562797fe32fc9bef670ee75082f12370e54d6f43ff98e9a83a318f747c3d391c064c502daeeacac906288ba5232e550b31488e3d195a8746ab8b7631e0666796c64ac346b36a5d72d063b5dbdc7e5b85a7840eac7cc983635e"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf00000000000000) 02:22:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38, 0x100000000000000}, 0x0) 02:22:55 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:22:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38, 0x0}, 0x0) 02:22:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1008000000000000) 02:22:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38, 0x0}, 0x0) 02:22:55 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:22:55 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX]) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:55 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1100000000000000) 02:22:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38, 0x0}, 0x0) 02:22:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38, 0x0}, 0x0) 02:22:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1208000000000000) 02:22:56 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:22:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38, 0x0}, 0x0) 02:22:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1640000000000000) 02:22:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x4) 02:22:56 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:56 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX]) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x40000) 02:22:56 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:22:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1648000000000000) 02:22:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x1000000) 02:22:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x4000000000000) 02:22:57 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:22:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1800000000000000) 02:22:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x100000000000000) 02:22:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1840000000000000) 02:22:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000100)=@can, 0x80, 0x0, 0x0, &(0x7f0000000480)=""/2}, 0x1) 02:22:58 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf25130200006000070008000100020000000c000300020000000000000008000100ffffffff0c0003000000000000000000080002000509000008000100d23100000c00030050000000000000000c00a56768e0e9afa15600000c000300050000000000000014000900080001000600000008000100400000000c0002000800010080d90000380101001c00020008000400060000000800030034a4ffff08000100160000001000010069623a767863616e310000005400020008000300090000000800020019000000080002000100000008000200400000000800020007000000080004000100000008000200040000000800030003000000080004000600000008000400090000001000010069623a766574683000000000100001007564703a73797a30000000001400020008000200040e00000800020007000000440002000800020001000000080003000100008008000400f7ffffff080001000000000008000400000000000800040000f0ffff080001000300000008000300ff0700002c0004001400010002004e22e000000100000000000000001400020002004e20ffffffff0000000000000000100001007564703a73797a3000000000a793533f72b1a3d8793e0cf5ff15cdbc76765d1a72698a151a3acb060cca68ae596fa831282b51fe91c7e12b38271943071e7fea086f55b0f60c857477e33af6b3119f239a9a4d7590a141b52ae3797830ae81e673fa9f3e93d8bdb3fb90f9f8e49da782fe06825c363076cd90b1ad28c50b2f69ed48d0771fad8b54efc7598bd6f412f8ec28922f48da266e6de98b66d0919e3b9424b7bbde04c7aeaeaaac0bd06be7562797fe32fc9bef670ee75082f12370e54d6f43ff98e9a83a318f747c3d391c064c502daeeacac906288ba5232e550b31488e3d195a8746ab8b7631e0666796c64ac346b36a5d72d063b5dbdc7e5b85a7840eac7cc983635eca"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:58 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:58 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:22:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xfba36f46421fbdea) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:22:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1a40000000000000) 02:22:58 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:22:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1c40000000000000) 02:22:59 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1c68000000000000) 02:22:59 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf25130200006000070008000100020000000c000300020000000000000008000100ffffffff0c0003000000000000000000080002000509000008000100d23100000c00030050000000000000000c00a56768e0e9afa15600000c000300050000000000000014000900080001000600000008000100400000000c0002000800010080d90000380101001c00020008000400060000000800030034a4ffff08000100160000001000010069623a767863616e310000005400020008000300090000000800020019000000080002000100000008000200400000000800020007000000080004000100000008000200040000000800030003000000080004000600000008000400090000001000010069623a766574683000000000100001007564703a73797a30000000001400020008000200040e00000800020007000000440002000800020001000000080003000100008008000400f7ffffff080001000000000008000400000000000800040000f0ffff080001000300000008000300ff0700002c0004001400010002004e22e000000100000000000000001400020002004e20ffffffff0000000000000000100001007564703a73797a3000000000a793533f72b1a3d8793e0cf5ff15cdbc76765d1a72698a151a3acb060cca68ae596fa831282b51fe91c7e12b38271943071e7fea086f55b0f60c857477e33af6b3119f239a9a4d7590a141b52ae3797830ae81e673fa9f3e93d8bdb3fb90f9f8e49da782fe06825c363076cd90b1ad28c50b2f69ed48d0771fad8b54efc7598bd6f412f8ec28922f48da266e6de98b66d0919e3b9424b7bbde04c7aeaeaaac0bd06be7562797fe32fc9bef670ee75082f12370e54d6f43ff98e9a83a318f747c3d391c064c502daeeacac906288ba5232e550b31488e3d195a8746ab8b7631e0666796c64ac346b36a5d72d063b5dbdc7e5b85a7840eac7cc983635eca63"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:22:59 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:22:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1e68000000000000) 02:22:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) r3 = shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000180)=0xc) setuid(r5) r6 = getegid() mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESDEC=r6, @ANYBLOB='8']) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) r8 = getpgrp(0x0) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000000)={{0x100000001, r5, r6}, 0x0, 0x67c2, 0x5, 0x1, r7, r8, 0x7fff}) r9 = socket$unix(0x1, 0x2, 0x0) bind$unix(r9, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r9, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r9, &(0x7f0000001380)=[{&(0x7f0000001100)="d2", 0x1}], 0x1) recvmmsg(r9, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) r10 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r10, 0x8927, 0x0) kcmp(r2, r7, 0x7, r9, r10) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:23:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2068000000000000) 02:23:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x48010, &(0x7f0000000200)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0x10726dbe3d30e862, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x2}, 0x2100) accept4$packet(r1, 0x0, &(0x7f0000000000), 0x800) 02:23:00 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:23:00 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYBLOB="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"], 0x2}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:00 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2448000000000000) 02:23:00 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:23:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2900000000000000) 02:23:01 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYBLOB="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"], 0x2}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:01 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r5 = dup(0xffffffffffffffff) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00', 0x0, 0x1c}, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x9, 0x10040) r3 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r4, 0x8927, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm_plock\x00', 0x440001, 0x0) r6 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r6, 0x8927, 0x0) r7 = socket$inet(0x2, 0xa, 0x0) getsockname$inet(r7, 0x0, &(0x7f0000000380)) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000800)={0x0, @initdev, @dev}, &(0x7f0000000840)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000001140)={{{@in=@local, @in6=@local}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000003280)=0xe8) sendmmsg(r5, &(0x7f0000001080)=[{{&(0x7f0000000540)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x0, 0x4, 0x4, 0x4, {0xa, 0x4e21, 0x7, @loopback, 0x76}}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000005c0)="86c6699078597fdab49ad48887dfe411dc98c2eda749784c039e1a48ce37c21a2174fb6404080f980551fe36885e05bfff697ce6da353b4388", 0x39}, {&(0x7f0000000600)="16b3d0c5b850d04557364b7434ba99ca6efb917e10ddeeda76468713233d1438c1495b65c4c4bbddc8c2065c23857a88798e3729b3eb451a133f03d2e97b118a0d", 0x41}], 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x110}}, {{&(0x7f0000000880)=@ll={0x11, 0x7, r8, 0x1, 0x6, 0x6, @random="1b0a5630bbde"}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000900)="f9823b3a76db165c99d634abe819ed638ea517e9937aba00f8838474b1a9e3df9703b175715bb23b3eabf3a5400dfa3af9a77fde1665d1512b4b4e28d9444999e9ce8c59097e585585b0f12e6e8dcccb", 0x50}], 0x1, &(0x7f0000002000)=[{0x1010, 0x228, 0x8000, "6ed6f43361a025853f495f9d327384455a8ce635970ed837bd550b00c4a6efc6a004733aa50a65e7b8b342f643e61bb9c59d5d7182b422744072601c048f16a174d45f93d9c66894c59f5c6be4a98161be59b2439c57e36ef2e57313c7e139ae0efba87113053f004df52c755462226f940f971c18b294c0b6a07e5dec4e5a6c084a525b4b1a17259c3b1373d5fabcd87fb9a1881cf275f07ca9db394ab1c1d3b2e42d4c2f7ac66f248ad3beb37925a3a50452ab168fad971f20ac8c098d275ee417016828282a665d68e450ee931b1aa04bd980bcf7a600dff3c3a1c8f375301c9801cb62dba3a5fefe2cef71851711cdf85dd2f49908268806ca21a94b3a3eedf50231a9039ef4ae1dab0b408560d95bf59407be3aea0ed1895410abf931d7f4f2740241ad0da41e6566be6ac06bb423f053fa27a69a22ae2c4b546d1f4837c5f22035a569602073719b9ce38f761cc3eacf912395424aafecd46df77caecfefb28b2302ff2ff32fd7809b6d40ee4ba6962d0d4516e848c83d86b029478a81a1076407a8d16c55d33a5b0f31fece919d2c2035ba50d4f0c74df05ea47a368e7a6625c51c2ea2ba4b77882fde296aa7498776f9c37aa1b5517f8f50d8e04b54a9dc36feae33ed601cd2347462d9edddb6dcad1bee45f40ae3de4990e0c3d2a40c1d235bea692d9b034932d5bcd249a6ebfa5366087340f39f803a67654c9b73aba32c08bb0e866cb52d1eb4b524053a37717977e253e77d8cb2cf217d9b389b1806e93a48cc3524077808322711ca83023f419ddb85f7a68eecf2bfc7e818c039d3e28169b47266542f72c76b1ba09294870f7efe0500f2f44fc90cd58e9fe4f3b71d3132491a82940e8906e07cc1085cd5e82231da37ed493bd844425d078e4f1ad1d317abfea0fb0b33c99645014f1fff79e7bbca45acc73357609e479f4265fcbff9fb22e49a8f23b9d40826dbf5e72daac11d009d94a0be8b501018d779a2f2f889ff027aeeab7ef4e3b3fa50df6340f94fb042f3a3009a3020c3bd46f6270937f935066a9146f6521f8a9c9b525eada5404d605aaa45df827d867da6fc8a194683e0cfe2657e723fede08bf04178fe4e439869a6a68c61ba2741dc82ea5238d9a19f0db944e57102bdb498b6d8e7f187a531eecc1417cb1ad0269d41e61b040ba3797f2bf5a5bbdc6344dff9e6b896a6d61b71dbfa6d1e511b12a55a8e8797b8b9829cfaaf109f5b09913568fbda87bfdc6c1c57eb0be81f35001253b5fbd0d729cf3f7f5552aff94204ad112a7fa314f879b2ceaccc475fa1e8df7cc6423f341e501cebb81d63d03af01563622d358ee38f3e6d93866490b151b6f5caa77351adc04cf3cc6b2059f890ff637d0fd0ff3ea0e74b432b312f1e2a3d7bf1e7c848a2201c98c6dd5ca9621f914ee322473ff24a0af631df3655f69ac12b16b88373c26eef1ba521cd0f61a6f025ef8300120afd828434e40ec217ce2ce0991eaefcfc7685c9c279c1d61d012fba39c60054c8e794189d232f01e380873cc2f50b4d720f5e8ad05d4aa0d6a370432de16f6a1317ba73ca76e02242b0e053a589e59f61e4a2de90288bd3063f18e091ff000e9b0c69198662dfc1d8a5c9d18001c3c107a8a1405e64141b4746cb9556f53c6eb3aec6e60d42456fc12b1d6d4bfe61257dadec1822dc3f0fcabd8971104d52be3223510fdf08e76fa5c990f9561a4a66c02ca9c001a20f6a712d13bf51a090958388f8393c0743649b56988db398e0a317e99e87474e5ffac6632b8d9bf161af046d66c960fa35bd48a9bed4b4e0e2413b142fa58654980b5d1d75b61344634490c20b84bb64ad1d1f797d69c8e17b8a110d78702fb3d9f176121e0c44da17fdac3f6a28ca5caae299da4725e142fefa8ace52255e93764e8c801cda9a709a4b9ad26a08d0b0dfc72654496cce4627f24be2f91ff23db5ce03cea021cba3d82937ca8a486af2e3b214e3c20233c9d8a2aea8c6aefff7659c76705ca2b8728968f3f675b558297ee541e487b2b15a00e0e732dabc8cc81ea9b4a1250325e1a43840ef88e685412e5b22701717f8a7060b40cf1e011f7f63f101db318bd4ded927d2dd8495cbeac2446b8381c9ba2277b965c3074d8cec0186694867c30d57acd81dc9b84b548fad01e2a5dff2cfda267f0020581fe6c3ca70ad5d0d2101ea6ec6d07981c32ceae5495c1413405e86951005dcb5d8efdcbda6ae1fddfb7999e1b92af858bb9c61e2f71cb38e10f30c22ba1ec9d7310626060c012b292a482981f04495c4830494e86de84eab32931de35cb98aee0f2a9dbf416d177a38efcf5932efcd672e030000cd9c30ae3a3f799fd59fbd934dc22cc800b3449dfbc8331ea18943c063d22ef9481dfdad1f97c3bffb7851814612a3c95588b128b59320c514f7a1a6a4326ceb615995f4ca8d0b81061ce2ce190f1114349b3a51a816f9b6a118a9e8a463fe403b97cbacb28d97a0e1d0731de2fae005098b3619d7bef7902b682ca9148fd25cc3b186b6b2c26e7c2a8509e1da27939e78be6c17f03f219959a3512f3827ce3270393e57643b4c502ff37a3983653c55567770d465e1ee1c1998fd16f2e0334159fc46ac9193593df8a3c980a009fc5ba85b4840290254bc26278492372c3ce44fb6c000de0b2b6abc05743a4ad89da0468a5e04bf76f662731fc50ea974d7bbdfbaeb81421a6a596a3f683e97e1ddf276dfbb3cf21457774c150ae65da96c0e62dbfb697e3dc72da86fdb691ff7487d85c839d7488f320f59cde25a51f6f26af0a9d11df6fcbb1211f7f1c098e1e83bef2ffab6bf6d6534b8d1a72b380bf2c329175d3d8572ef9b654adf58e89bc99ab6acf36d6524160093d84529760c79c547ee13e8ca32bfd8785d42e836ddae7b1164d68adc9467a6bc1a0ef0671b55efc1e9d6830f98452dd928c1534eb78bbf334b6bc92b431573230c770f056d2880c0daf8398f8859a882dca04aa3dfe2baaaa2640ab9e840325ac25b14d42fb7fd3e4e3b3a0f0428d4bc4680a379fbf6ac92adc4e202c879f23b3687376735bee6fc5b9e9f63460c076750d49efe86317d69fe98e6fadbfc2484639823dbf8c3d50e296dcc30ff37119515ec3bec84b079108e0426b2a8bfb7723d345f6eb4dfb566d3746c6a66738fc9e4bcf284efb533d808230a0cc655ed02de5e1fc498e1b5d81fde34f6390c3bd47664f4ed64d3f3776db45806b8909025a80b422a169411b8b45a120429e31278e55a8b3c19d6ce4df816c87beaf8d3d01904e61ba3c910d4a659a018e7156dc39fe82700782f8a8afc3b7e9a084fe745831165b64cf8c656fff81d57c3e3f644972a5a0ae573310cf6f3d0f887188410ae86b4da753ca56c315816cc28646bb764a4363b68ce30bcaa652b7a319d81770e76b8cb472d67e5d004281d4e19a9e5b56f0a9da38a155e6c2f0380526225a06567c77e32c78b79b0ab2a795418f4c84de3382dd8546c30576a97ce85bc5d391aa824672868002fd08ee331de137cbce6787f380b54263fc4d833e361c8e7ae8ef266665baa94eec38966257720bf2d6a1df600a28a5895935cd1494eb15950de5cc29e597336ce72d73396cde639ff01122a3a72941adaf18ca2a236383ddf5b3fab822e84c7781f160dc436fd09cbc1da9cc803deb93fce5d190e7e1cce3e6bca2132f33c59a1e839c0f189a4b43124dbf90180e7ae734a6c5d426ec377cf89c0a06783abba201fdebd03b75f90e25297bc9289f04d0a42bc34ab33ce2186c5550b5191588f19922e74c4c05e77aa3861c470560761b3509a306b33c23cb55dc57578c5244aef57a6be8bd9fae50240af0aa760ec712dddba6512b98673b72362b868e5d592ba6b927a9cf65979a4b9bd221f5ed4faadf3b290ababd04eb2431edfb4f6f25081dd643c79ef683037832cf1ec98d8149387aa8442219ca522c58ef8efc477998103608cd08060476f3d1a49474fd283c4d39989dc56845976346080de1927faed4f5ef70915c501229b4ec39b37625dcf9c2a23d41924ffe82ae19e34aab8b6d81e0353531bb9f044a35fb78606e6b4c656413f798119c95d3d67051095929f63ce5c708626803c5d2915fcb93e51f9b336e75aa8fc8b30aae639b35f5c9ac4f464e3d41cc0a092c06fed5584811be28b5411c87d13a7a4fabb9e1811681d5d60ab6ef2f34f2a06d4dfb8cf5becf73040e3289e46a45e0a9488f58a7fe30658a386f4868d77253ed75b5a9e203615923d1f970cab3978d1871a7188694dc5bacbb21cd0dfc454b604224ebc823e0c50bdb1e1e58edc1508959f4aab23b32452c43eb123d85b1664f306febcd04330a8f0eb9a2e118dde996117618271b04f025453b6ca68efd24140efb3998c324067bfc6824158d2fc73901402b41f45cc51205902509bf4d9516a0620e140be024e4a34ef4da2047409cfa066fe11fa3cb4269d8ad70d5fba19ca7067a178a4b06c91ef71fea7bf6460979cd5972b3e05ca19ca44ac91a50656f1848202b63e15d993517df252388edffd8a901f48c0dabdcbc515025122c8d9c9d6b59f99f81790a7cc09b160b7c7f99095801f5206a7174f1fa12b56a535405c2c4487146f31119b5fbb9fba5c99ab042d66ab2f78c62f256c945ccc0ab1220ae9dfe1df70af780b65e28804a1010913c997c681a688fba864706cbf88c2174945a9f20c1025522f7fa3c4dd5ececd8855be66a2a6d6eb14826636256a0682521f3981e046abfcf607e36275383e85845fce67907e83c1452302fc31c10334f6bd06ee4df75960d8cbdd45713799fc17f9ff0fa6b8578451aac1c0cd024be346e9eaad4de47d0188c027662e91b9314d2bf045bba09e9ebcefe67a136cc086fce56070cf8e9bd56643ed19c6b5a5ef81d323b6ac6ff4eef897a5d00d0b28d3825d4217252f74a1140c048e846beb261630dbc5352b987a5f043d90d8e0f32422a5913a5ea4005b4e37794a28e2d6df2696dfa4e4ae3425757f33d7605aee591af182ea2d4b5b51843634127074afacdda802f14afcce10247957d6d72ea8d5e9cc98f3b379d6c9dfd003b6111d9356a03ed029d61269c9d82406313b039ca629e2f3de9db739140bac8f11709e3c8d9dc4a8a3cfa60176ae12d7c327c9ee42a7d31b51a69ccf4172270991d946ca98d3416829a271491e9e89eeb5a0889b8d0215b6cf53d6614870ecd8d24dac9cacfba86b5b5d9de6d2543e8a8f5600d3f92001c57d78fb075d643e313f4d10e0509bfe9a7fb59cdfbc2e6993890d9f0710f5a1b56475afbd3f23e7e447d58115f874e95b531162e49b3e9ee411ee3e85b6967dd25369e5982a6ad002e44f3c418bc1f73dbd78636e192593e30bef2e39c864a99895e2f988c876f2718610ee3aece4ab10cbab0808261699388634394d788292489be9618d76dd2d2bb88e9f27386a6aecebfa5a9026e980fc595c465ef082e4c6e4990824052894c3c08dd4aea0d38f8e225763e75e80a0095b1c22c046777da687147e1f0cdc919adc6528d3020b3f999cf82f9878a5e294c8199b5e13de7d347539c7c3799d424dcc146e5623e2c07c587629c276cad622fe3d532fefcc352a4ca20899dcd938a100c894865859ef6855fcfbbd4d81673b62015045d70ea1ece8770ffcb7870bae05c0a79b1e0af4b15b1dcd340ee9e4a7b24a20655ce15e96a9388f646c5b660512a3a770d3e287c38df40883541a504b16510fc33d7022670c4c1338d55d13aca9c0951dba9b88604405d7e880601cc37f9239"}, {0x48, 0x107, 0xffffffff, "1b27bcf2205f64a95e587ec682dbec7a1abd039981c34adefca44a8ffab5de5d63ca243b322685866289aa92ce2d99845c6c23"}], 0x1058}}, {{&(0x7f00000009c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000a40)="b5b279d0cbce9eee796ef083e28e43853468720a0dfebdcea4324d16cef87748a899a5e6adf2fe52aea60a87a3919c9da37389cfb0157f06d59f1910b03ecd2259e8939c79e0ccb374d8f9f2a47f48efb1fcc8c9b6d72d2b74400ff1cb3d30758bf814a9cbe8181976ca8e59c12e9a4176c14e8e5c349e34c0c404327e15a4fac2b6f45ee6cd60044dbaf3461f61b9abe6f65b1376", 0x95}, {&(0x7f0000000b00)="a7043b89fc65e8934b90982731605e3c0ba11da82bd0673ef09cb949c8a6135c50ecd6f4c2170b6744639801a73136a6a57bd599debbe8bb172d15fb77d6f6e27bb2c1635eac45bc7dff0d3fda0c85421bba1daefd13da71416eba5375fa8b2e1ef76ca41a96a48cf6e27c1255681374a22125c476d9cb04ce3be7b21e4351313714585110596b71b1ecf61132466927ba8f2da7a6f5e2f74402f5eb449d75e318923f12aba8b9306163015e7e51e80f94f8f67df70ebe6d2bb504b65dbf584a5afbec7812b05bda898d61f19db8e36cc511383e", 0xd4}, {&(0x7f0000000c00)="13095312b008dfc6954deb04561d3acbdd8f43d5bde580175eb1193b2ef4f4e07b1dc1f4478dd699962f995dfce0fb3af24ce6bef099cefa7f3cfc00374649e74fceae91e86c096eff28f3192da4e35773edf65c61e5e7b0070dac09a328d100ef0ff7aeb8660412953c4eb364fd4b164fc029d0bd6b4ab97ea509a6c9e7b2c6960894501d02187da7aa280631e7d370ee1dea2f50712f95138f63fd448c9bf7c04f7675b5d512b13b38d91c456e930ce72c8a2e071282ecaf89b5dada2dfdd3862fb48578d57d2566cc051e275c855245c2693e2712ca24d76dc2250d40452d169c", 0xe2}, {&(0x7f0000000d00)="8d47e33e895166aa3162a37420a586cf84fbaed1b84a7fcf0755368f43fb976ff05a87879f12270737018c8bacae3abfa30631753c5773a7e7bad86e50191386d26586edfecb29eb6cc2173a63b15d6d285a8a0e6f288c017b29eaecee14af74c8c6f96ec04ceecc7477be7247e3575dd08522e5cab74dda5b3f24ce34", 0x7d}, {&(0x7f0000000d80)="96831c71cb12de87b9ccccc3a603569586c708604f3095d2c6b7f6fd451b3d475efc1e6082e193a22fd0451227a0bc827d61548949c8d132014e11618ad734f7f6848be6ff6558bf5b97023b24e7771de60cb857b60d73fb00574e24144186a5de086468614b19398773ba51853cf460855abf4121e9b31c3b37f793b47cbdb3229df842cfd9663fa4e4d123f91897d4e5a1bc8560af15dd83fd6771b00757a413d62de5e5109c902873c7e77c3a0ccab65a824217ccb9cdfc", 0xb9}, {&(0x7f0000000e40)="8da19a7f5c18ea49077b6a1f50a1ea3ad2517791d7bb741be5f54821f92b3043ef6767ba2d80a5e40a5ca19eb1d60474794f054d2dab33bf80f98a7910578ac7c65994603d971a6fd1cf0e6a14271cb4110af96a39aee1cd8a0641d37c9947ea849b4be46b205e38f9ad2c76ce01a942e3030bd616597c5b5d8319d9ec171f14c0b888288bec607d7c62f5761559c1ff58e73919dea78c9992080880915c871133d2a0de21f9a1f5a56972714617a70e4ee5fff2f097870a72081500ec4e0ac2e6d659f77803026969281a9aefab25157e", 0xd1}, {&(0x7f0000000f40)="e2b7b087a6cc1ef2db9ba5219a6ece6de697dcf55f7df4847190e493fcde0f6a260085b79bc0ebca8dfcf9f69b01", 0x2e}, {&(0x7f0000000f80)="dbc14e4736f416534f5fbb3bcbc9ad4981ef570c2c89aa657db787bf51cf05d9bafafe6c4c9f7a839da050e87537ecb6dc525d2f892ba8f4e766476f11bef6a7b533d3d1a700c1", 0x47}], 0x8, &(0x7f0000003080)=[{0xd8, 0x102, 0x7, "4576f624ed966dcd2490cccfbf9bdf99b4f2ae9693d3ab9ce208743ff52ecd6086aea8a0b9ed97579378d39d10c83ca74c508d51aa8a67f7181659aeadd22b34c93c51b53a27f63bdda0d09cfb1858ab7190c14d5e202e15896827a52a59f1253b3c39283d14ec2a8b2c5eee0ff809ec05aa45d131603162a259d758cd8c4b313a5a1be9010db0ecb2dac3b36d9eb0ecfe8c798addd7ca09118bb4799fee9202d278f5dcc0b5f9d58384ed738b69e702b4fa733d484e7f339062383c061ce238fb532f4d4ae3"}, {0xc0, 0x1eb, 0x4fd, "a05725b5a696405bad822a2277eb0f5058401a4ac2e3c2376ecb1a541bbbcfe2817cdb74502af74aa08a75fddb746e70d81180764f51b814d23064c7980f2768bf45b6688744db80d5e1d5ecd9c6d6c312049d36f4e4da38290224607fa42d66e65de0a67fd1cf483532c560e4db7250c18b7853f1c91da4fa43345178d2ee39003548d97e7ec8a35fec450d5b9548a4c9606ed3470362539e52b10a3ad17ff8f0366243b76a6b558d05df965df14521"}, {0x30, 0x2a0, 0x4, "d611ef0b9caaefacae1a9594fc7543be0c83ce03ded4757585fa95dbef"}], 0x1c8}}], 0x3, 0x14000051) r9 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r9, 0x111, 0x4, 0x0, 0x4) accept4(r4, 0x0, &(0x7f00000003c0), 0x80000) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20020000}, 0xc, &(0x7f0000000340)={&(0x7f0000001280)=ANY=[@ANYBLOB="280d00002900000327bd7000fcdbdf2500000000", @ANYRES32=r10, @ANYBLOB="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"], 0xd28}, 0x1, 0x0, 0x0, 0x40000908}, 0x20004000) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) r11 = shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) r12 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000180)=0xc) setuid(r13) r14 = getegid() mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESDEC=r14, @ANYBLOB='8']) r15 = getpid() sched_setscheduler(r15, 0x5, &(0x7f0000000380)) r16 = getpgrp(0x0) shmctl$IPC_SET(r11, 0x1, &(0x7f0000000000)={{0x100000001, r13, r14}, 0x0, 0x67c2, 0x5, 0x1, r15, r16, 0x7fff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f00000032c0)='\x00'}, 0x30) syz_open_procfs(r17, &(0x7f0000000280)='net/mcfilter6\x00') bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0) r18 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x8001, 0x4000) getsockopt$packet_int(r18, 0x107, 0x3, &(0x7f0000000440), &(0x7f0000001240)=0x4) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000080)=@can, 0xe5, 0x0, 0x8d318457, &(0x7f0000000480)=""/2, 0x38}, 0x40018101) 02:23:01 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:23:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2e48000000000000) 02:23:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3f00000000000000) 02:23:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000040)=0x3061, 0x4) write(r2, &(0x7f00000000c0)="2400000052001f0014f9f407000904ff020007020800ff61a6b0ff8724ca0fa5b49b57be", 0x24) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000080)=@can, 0x80, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x2}, 0x0) [ 425.164922] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 02:23:02 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:23:02 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYBLOB="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"], 0x2}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:02 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r5 = dup(0xffffffffffffffff) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4000000000000000) 02:23:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x920b000000000000) 02:23:02 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) [ 425.939518] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 02:23:03 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x400) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r4 = socket(0x40000000015, 0x5, 0x0) r5 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r5, 0x8927, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x200000, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r8, &(0x7f00000002c0)={0x0, 0xf0ffff, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r9, 0x5, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x34a, @link='broadcast-link\x00'}}}}, 0x3b2}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r9, 0x400, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400c000}, 0x62000800) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4040000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r9, 0x400, 0x70bd26, 0x25dfdbfe, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x18, 0xb38, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) r10 = socket$inet(0x2, 0xa, 0x0) getsockname$inet(r10, 0x0, &(0x7f0000000380)) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r4, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:23:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe803000000000000) 02:23:03 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r5 = dup(0xffffffffffffffff) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:03 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="01002bbd7000fddbdf25130200006000070008000100020000000c000300020000000000000008000100ffffffff0c0003000000000000000000080002000509000008000100d23100000c00030050000000000000000c00a56768e0e9afa15600000c000300050000000000000014000900080001000600000008000100400000000c0002000800010080d90000380101001c00020008000400060000000800030034a4ffff08000100160000001000010069623a767863616e310000005400020008000300090000000800020019000000080002000100000008000200400000000800020007000000080004000100000008000200040000000800030003000000080004000600000008000400090000001000010069623a766574683000000000100001007564703a73797a30000000001400020008000200040e00000800020007000000440002000800020001000000080003000100008008000400f7ffffff080001000000000008000400000000000800040000f0ffff080001000300000008000300ff0700002c0004001400010002004e22e000000100000000000000001400020002004e20ffffffff0000000000000000100001007564703a73797a3000000000a793533f72b1a3d8793e0cf5ff15cdbc76765d1a72698a151a3acb060cca68ae596fa831282b51fe91c7e12b38271943071e7fea086f55b0f60c857477e33af6b3119f239a9a4d7590a141b52ae3797830ae81e673fa9f3e93d8bdb3fb90f9f8e49da782fe06825c363076cd90b1ad28c50b2f69ed48d0771fad8b54efc7598bd6f412f8ec28922f48da266e6de98b66d0919e3b9424b7bbde04c7aeaeaaac0bd06be7562797fe32fc9bef670ee75082f12370e54d6f43ff98e9a83a318f747c3d391c064c502daeeacac906288ba5232e550b31488e3d195a8746ab8b7631e0666796c64ac346b36a5d72d063b5dbdc7e5b85a7840eac7cc983635eca63"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x100, 0x4000) read(r1, &(0x7f0000000080)=""/32, 0x20) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f00006dbffc)=0x3, 0x4) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x333, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0xfffffffffffffe51) recvmsg(r2, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:23:03 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:23:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffffffff00000000) 02:23:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffffffffffffffff) 02:23:04 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:23:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r2, &(0x7f0000001380)=[{&(0x7f0000001100)="d2", 0x1}], 0x1) recvmmsg(r2, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) fcntl$addseals(r2, 0x409, 0x8) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000003c0)={0x0, 0x474c4534b0062ba8, 0x7f, 0x9, @buffer={0x0, 0x35, &(0x7f0000000000)=""/53}, &(0x7f0000000180)="aa46620bf399aacf6fdc745ab0946c993b1d207e2ce15dd0674bc37960e41c69830e232a5d424c25d8391d228d09ad380279e9e5e4feabad3e0ae0b8b0a9b2620379315ea1e199dde8edd02fd6ef31a20831503950084eb8ca09514c78bd835ac48c46bfa2a44447efabc12343d994d6df6a6bd7a50eef9e7198b673eded93", &(0x7f0000000300)=""/143, 0xffff, 0x22, 0x1, &(0x7f0000000240)}) 02:23:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[0x3, 0x3ff, 0x1]}) r4 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r4, 0x8927, 0x0) r5 = socket$inet(0x2, 0xa, 0x0) getsockname$inet(r5, 0x0, &(0x7f0000000380)) setsockopt$inet_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000180)={0x1ce8}, 0x4) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000200)=""/234) setxattr$security_evm(0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYPTR64, @ANYRES64=r0], 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000300)=0x2) 02:23:04 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:04 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:04 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:23:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000c00)=[{&(0x7f00000007c0)="4c0de5347f13fc057031c03777d624ed79e3b528e19e50c8a677bea099ae40f1b1aeb7f7b013da901d8d7b24b5bfcbff12d8eae914b1734a117a10e40d7424b5c1721801fbbe4e5bb236991c98cd9a2e9006e9082b2d08a5a11bcc62be1a5904a5df8ce24cb72986776a4d1497639df49969d7d54ac4970e4b87e5a9686f5826b3", 0x81}, {&(0x7f0000000880)="7e80540c573b54ff83824e4357fa455cde38185f33c6bea7cae1f8f140d3ecaec0e35d88b26d0522ec1601d06826653ce3a4dfefb564b91c5bbc50b0a3cce4151d06ce0734cd3f7da7d9bef8872c19cbf213dd4a04fe1bb9bf3b479a9befe3b2c4abc1bb6f06ad475ebda3380d1e015dc82753a00ab7db051e13d433f5f602a16f190711d5c649229a74c637e3030b926c41318187d752f0bf69f6cd2893823a2f70961cb7a3009b5802fa97", 0xac}, {&(0x7f0000000940)="04f3a1a3b5eac9c151a1b7bd9b2dcbdd249097bc070292b155b1a24e6e6aacf25da1396938a0f13c2f14bfd3236dfb8c01963fb08daeb4b9dbf1cf979624cffc5b5ad9c7c73f301e3b8df3116b14a88bfc17f1221cea57f0f34e331b3d60a66432bab442a0fe781e3d79cf69bd519d7b97f0a725f26993c3fd8d6e78fc757ca92eecfeb599ce5836c400dbb73ec274fc7b6b1349bfebf66ac9e52e9839946f136722f7b9612e65601990cdac43ceff42ccc4cdec288dec1ae672e7458355709d80eb12b454c797532657d5b0950ea7c0afd9a7579adf4c9c16120b390a3d4b", 0xff38}, {&(0x7f0000000e00)="8349560e9a542a0ffc881ab11ece265ab29089111c0e3a69f29ad860ecc986d3cd26500d07f88fbd6f84613cb20bd99b7c62b2b70fcac991cd48cac25af539800d59afbdf22e652dcd239b7b50e172719d3eda696129b30538ac4d0622236ea0e60857046d55538932c04844dcc6ac6e346ae454ba55d3fa58f22343ff92a0ae8a3b3496fa3cfd6873e9dcaf79a860f0080ff4d69894b60a13fdfac43ba5a6c5f94cc70d35f58118e7731ddc015ef6e516852c041b6dce289dcf51a8994a473f03229446d19fd2383e544b5b161b92e77603109d8365e49cde10043e145c2005dc2c20ee4c93e5c86bd9855641", 0xed}, {&(0x7f0000000cc0)="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", 0x63}, {&(0x7f0000000c80)="c8daf405069f87e24db3a21fc5b1bc51e91dfc05d5", 0x15}], 0x6) close(r2) read$rfkill(r3, &(0x7f0000000000), 0x113) r4 = shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000180)=0xc) setuid(r6) r7 = getegid() mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESDEC=r7, @ANYBLOB='8']) r8 = getpid() sched_setscheduler(r8, 0x5, &(0x7f0000000380)) r9 = getpgrp(0x0) shmctl$IPC_SET(r4, 0x1, &(0x7f0000000000)={{0x100000001, r6, r7}, 0x0, 0x67c2, 0x5, 0x1, r8, r9, 0x7fff}) r10 = syz_open_procfs(r8, &(0x7f0000000080)='clear_refs\x00') ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r10, 0x80dc5521, &(0x7f00000000c0)=""/24) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:23:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000240)="66b829018ec0b9800000c00b730f3066ba2100f00fc70fb8c8f61a8eef66bafc0cdeeded0f38f15b0036400fc75a00c4e1f9e6010f87d485a71b64440f01c4b805000000b9008000000f01c1", 0x4c}], 0x1, 0x744f7cb517bf9f3d, 0x0, 0x2d0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:23:05 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:23:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x8c00, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@ipv4={[], [], @empty}, @in=@dev}}, {{@in=@empty}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="6c013800fec0667814b3f0bce7cfac64b97c93643f88d1304769f79c69c30a0ce7d9e4dc0c22484c783fb21c552bdcc9aa0acfe33fbdec28be279ec22cd2c451d70b26ec3cd4ccb6e0ca824c2760a6d933", @ANYRES16=r6, @ANYPTR=&(0x7f0000000900)=ANY=[@ANYRESHEX]], 0x3}, 0x1, 0x0, 0x0, 0x4010}, 0x80) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) r7 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r7, 0x8927, 0x0) r8 = socket$inet(0x2, 0xa, 0x0) getsockname$inet(r8, 0x0, &(0x7f0000000380)) r9 = syz_open_dev$audion(&(0x7f0000000580)='/dev/audio#\x00', 0x1f, 0x200) r10 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r10, 0x8927, 0x0) r11 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r12 = socket$inet6(0xa, 0x4, 0x8) r13 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r13, 0x8927, 0x0) ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="0000000006000200"/28, @ANYRES32=r9, @ANYBLOB="0000000007000000000000100000000000000000497c01fe5354639a", @ANYRES32, @ANYBLOB="000000000300"/28, @ANYRES32=r10, @ANYBLOB="0000000000000100"/28, @ANYRES32=r11, @ANYBLOB="000000000000008000"/28, @ANYRES32=r12, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28, @ANYRES32=r5, @ANYBLOB="000000000600"/28, @ANYRES32=r13, @ANYBLOB="00000000ffffffff00"/28]) r14 = socket$inet(0x2, 0xa, 0x0) getsockname$inet(r14, 0x0, &(0x7f0000000380)) r15 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r15, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r16, 0x0, 0x2}, 0xc) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r14, 0x84, 0x6d, &(0x7f0000000400)=ANY=[@ANYRES32=r16, @ANYBLOB="550000005deb23b551c4c9a615935ceb63ecd60cb7c1a56522339723f92776fc2f2d855eb1acd69074d62a0163d82889693278caf1b95531ce1487444af0da48515ea6d1999aadaf1a4ea11dcd06578973a494d4a2e82594f9"], &(0x7f0000000240)=0x5d) getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000500)={r17, 0x7ff}, &(0x7f0000000540)=0x8) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0x6a, 0x0, 0xfffffe7c, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:23:05 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf25130200006000070008000100020000000c000300020000000000000008000100ffffffff0c0003000000000000000000080002000509000008000100d23100000c00030050000000000000000c00a56768e0e9afa15600000c000300050000000000000014000900080001000600000008000100400000000c0002000800010080d90000380101001c00020008000400060000000800030034a4ffff08000100160000001000010069623a767863616e310000005400020008000300090000000800020019000000080002000100000008000200400000000800020007000000080004000100000008000200040000000800030003000000080004000600000008000400090000001000010069623a766574683000000000100001007564703a73797a30000000001400020008000200040e00000800020007000000440002000800020001000000080003000100008008000400f7ffffff080001000000000008000400000000000800040000f0ffff080001000300000008000300ff0700002c0004001400010002004e22e000000100000000000000001400020002004e20ffffffff0000000000000000100001007564703a73797a3000000000a793533f72b1a3d8793e0cf5ff15cdbc76765d1a72698a151a3acb060cca68ae596fa831282b51fe91c7e12b38271943071e7fea086f55b0f60c857477e33af6b3119f239a9a4d7590a141b52ae3797830ae81e673fa9f3e93d8bdb3fb90f9f8e49da782fe06825c363076cd90b1ad28c50b2f69ed48d0771fad8b54efc7598bd6f412f8ec28922f48da266e6de98b66d0919e3b9424b7bbde04c7aeaeaaac0bd06be7562797fe32fc9bef670ee75082f12370e54d6f43ff98e9a83a318f747c3d391c064c502daeeacac906288ba5232e550b31488e3d195a8746ab8b7631e0666796c64ac346b36a5d72d063b5dbdc7e5b85a7840eac7cc983635eca63"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:05 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000000)={0x3, 0x61d0, 0x9, 0x100}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="672664670f3802160500b95d0a0000b800000000ba000000000f30b805000000b9500000000f01c1f2d8b095000000b953020000b806000000ba000000000f30b8090000000f23c00f21f835010001000f23f866baf80cb89065148def66bafc0cb000eed2d3b805000000b93e5f00000f01d96764660f1168a7", 0x7a}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x3, 0x200140) ioctl$SCSI_IOCTL_SYNC(r4, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r5 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:23:06 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:23:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f0000001380)=[{&(0x7f0000001100)="d2", 0x1}], 0x1) recvmmsg(r1, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r2, &(0x7f0000001380)=[{&(0x7f0000001100)="d2", 0x1}], 0x1) recvmmsg(r2, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000180)={0x0, r2, 0x100000001, 0x8, 0x0, 0x9}) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8) bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r3, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r4, 0x8927, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) 02:23:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x14, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:23:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x4, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:23:06 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYRES16=r1, @ANYBLOB="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"], 0x2}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:07 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:23:07 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf25130200006000070008000100020000000c000300020000000000000008000100ffffffff0c0003000000000000000000080002000509000008000100d23100000c00030050000000000000000c00a56768e0e9afa15600000c000300050000000000000014000900080001000600000008000100400000000c0002000800010080d90000380101001c00020008000400060000000800030034a4ffff08000100160000001000010069623a767863616e310000005400020008000300090000000800020019000000080002000100000008000200400000000800020007000000080004000100000008000200040000000800030003000000080004000600000008000400090000001000010069623a766574683000000000100001007564703a73797a30000000001400020008000200040e00000800020007000000440002000800020001000000080003000100008008000400f7ffffff080001000000000008000400000000000800040000f0ffff080001000300000008000300ff0700002c0004001400010002004e22e000000100000000000000001400020002004e20ffffffff0000000000000000100001007564703a73797a3000000000a793533f72b1a3d8793e0cf5ff15cdbc76765d1a72698a151a3acb060cca68ae596fa831282b51fe91c7e12b38271943071e7fea086f55b0f60c857477e33af6b3119f239a9a4d7590a141b52ae3797830ae81e673fa9f3e93d8bdb3fb90f9f8e49da782fe06825c363076cd90b1ad28c50b2f69ed48d0771fad8b54efc7598bd6f412f8ec28922f48da266e6de98b66d0919e3b9424b7bbde04c7aeaeaaac0bd06be7562797fe32fc9bef670ee75082f12370e54d6f43ff98e9a83a318f747c3d391c064c502daeeacac906288ba5232e550b31488e3d195a8746ab8b7631e0666796c64ac346b36a5d72d063b5dbdc7e5b85a7840eac7cc983635eca63"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:07 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="a4ab3812f728db4b2b4d2f2fba03988cdcdf96ac4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e564779bb42eeee8a0df724d9fdd5fac188e5fe4c7c6ef0b6cff45a23890c181a5cb8f7e408037fb9a871bc54702660f3eac9167a3e0beb849d82cc6ac1bd43247a098f050084eb9ad1e225fa6fe91f3e638390ed7581b35d10e524cea0527346b634", 0xc2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x0, 0xbb, 0x0, "407947d762e31306f2a31a1c319d51fedfce761a1921cdf26cee70e504e67cb59290304eff31d5289ca0cc678a89d78beff85eafdcf4429db6206fcebaac18da0725f3b1073bb55c7102a9e28941fae1"}, 0xd8) recvmsg(r2, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:23:07 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:23:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40, 0x0) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x200000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f00000002c0)={0x0, 0xf0ffff, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r7, 0x5, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x34a, @link='broadcast-link\x00'}}}}, 0x3b2}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r7, 0x400, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400c000}, 0x62000800) write$apparmor_exec(r4, &(0x7f0000000300)={'stack ', '#securityem1%vboxnet1,wlan1\x00'}, 0x22) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000004}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r7, 0x700, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40029}, 0x20000880) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:23:08 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf25130200006000070008000100020000000c000300020000000000000008000100ffffffff0c0003000000000000000000080002000509000008000100d23100000c00030050000000000000000c00a56768e0e9afa15600000c000300050000000000000014000900080001000600000008000100400000000c0002000800010080d90000380101001c00020008000400060000000800030034a4ffff08000100160000001000010069623a767863616e310000005400020008000300090000000800020019000000080002000100000008000200400000000800020007000000080004000100000008000200040000000800030003000000080004000600000008000400090000001000010069623a766574683000000000100001007564703a73797a30000000001400020008000200040e00000800020007000000440002000800020001000000080003000100008008000400f7ffffff080001000000000008000400000000000800040000f0ffff080001000300000008000300ff0700002c0004001400010002004e22e000000100000000000000001400020002004e20ffffffff0000000000000000100001007564703a73797a3000000000a793533f72b1a3d8793e0cf5ff15cdbc76765d1a72698a151a3acb060cca68ae596fa831282b51fe91c7e12b38271943071e7fea086f55b0f60c857477e33af6b3119f239a9a4d7590a141b52ae3797830ae81e673fa9f3e93d8bdb3fb90f9f8e49da782fe06825c363076cd90b1ad28c50b2f69ed48d0771fad8b54efc7598bd6f412f8ec28922f48da266e6de98b66d0919e3b9424b7bbde04c7aeaeaaac0bd06be7562797fe32fc9bef670ee75082f12370e54d6f43ff98e9a83a318f747c3d391c064c502daeeacac906288ba5232e550b31488e3d195a8746ab8b7631e0666796c64ac346b36a5d72d063b5dbdc7e5b85a7840eac7cc983635eca63"], 0x2}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:08 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:23:08 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0x10240) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000000e000/0x18000)=nil, 0x0, 0xfffffffffffffd53, 0x21, 0x0, 0xfffffffffffffdd4) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000040)) r5 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r5, 0x8927, 0x0) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x13, r5, 0x0) 02:23:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000000)="f00fb13166b8010000000f01d90f22e40f22990f01d1440f20c0663504000000440f22c0dfd10f01f6f30fc73566b9780a00000f32", 0x35}], 0x1, 0x0, 0x0, 0xffffffffffffff53) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:23:09 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf25130200006000070008000100020000000c000300020000000000000008000100ffffffff0c0003000000000000000000080002000509000008000100d23100000c00030050000000000000000c00a56768e0e9afa15600000c000300050000000000000014000900080001000600000008000100400000000c0002000800010080d90000380101001c00020008000400060000000800030034a4ffff08000100160000001000010069623a767863616e310000005400020008000300090000000800020019000000080002000100000008000200400000000800020007000000080004000100000008000200040000000800030003000000080004000600000008000400090000001000010069623a766574683000000000100001007564703a73797a30000000001400020008000200040e00000800020007000000440002000800020001000000080003000100008008000400f7ffffff080001000000000008000400000000000800040000f0ffff080001000300000008000300ff0700002c0004001400010002004e22e000000100000000000000001400020002004e20ffffffff0000000000000000100001007564703a73797a3000000000a793533f72b1a3d8793e0cf5ff15cdbc76765d1a72698a151a3acb060cca68ae596fa831282b51fe91c7e12b38271943071e7fea086f55b0f60c857477e33af6b3119f239a9a4d7590a141b52ae3797830ae81e673fa9f3e93d8bdb3fb90f9f8e49da782fe06825c363076cd90b1ad28c50b2f69ed48d0771fad8b54efc7598bd6f412f8ec28922f48da266e6de98b66d0919e3b9424b7bbde04c7aeaeaaac0bd06be7562797fe32fc9bef670ee75082f12370e54d6f43ff98e9a83a318f747c3d391c064c502daeeacac906288ba5232e550b31488e3d195a8746ab8b7631e0666796c64ac346b36a5d72d063b5dbdc7e5b85a7840eac7cc983635eca63"], 0x2}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:09 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:23:09 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:23:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x1, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0x80, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x2}, 0x80012200) 02:23:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x80200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x7, 0x202) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000240)={0x1, 0x0, 0x102, 0x2, {0x7, 0x8, 0x1ff, 0x81}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10003, 0x2, 0xa002, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000100)={0x1f003, 0xf3930fa82407631b, 0x7f, 0x81, 0x18}) r5 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:23:10 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:10 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf25130200006000070008000100020000000c000300020000000000000008000100ffffffff0c0003000000000000000000080002000509000008000100d23100000c00030050000000000000000c00a56768e0e9afa15600000c000300050000000000000014000900080001000600000008000100400000000c0002000800010080d90000380101001c00020008000400060000000800030034a4ffff08000100160000001000010069623a767863616e310000005400020008000300090000000800020019000000080002000100000008000200400000000800020007000000080004000100000008000200040000000800030003000000080004000600000008000400090000001000010069623a766574683000000000100001007564703a73797a30000000001400020008000200040e00000800020007000000440002000800020001000000080003000100008008000400f7ffffff080001000000000008000400000000000800040000f0ffff080001000300000008000300ff0700002c0004001400010002004e22e000000100000000000000001400020002004e20ffffffff0000000000000000100001007564703a73797a3000000000a793533f72b1a3d8793e0cf5ff15cdbc76765d1a72698a151a3acb060cca68ae596fa831282b51fe91c7e12b38271943071e7fea086f55b0f60c857477e33af6b3119f239a9a4d7590a141b52ae3797830ae81e673fa9f3e93d8bdb3fb90f9f8e49da782fe06825c363076cd90b1ad28c50b2f69ed48d0771fad8b54efc7598bd6f412f8ec28922f48da266e6de98b66d0919e3b9424b7bbde04c7aeaeaaac0bd06be7562797fe32fc9bef670ee75082f12370e54d6f43ff98e9a83a318f747c3d391c064c502daeeacac906288ba5232e550b31488e3d195a8746ab8b7631e0666796c64ac346b36a5d72d063b5dbdc7e5b85a7840eac7cc983635eca63"], 0x3}}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:10 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:23:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000000)={0xfffffffd, 0x0, 0x2024, 0x9, 0x1, 0x6, 0x4, 0x1}) 02:23:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x1, 0x2, 0x5bd, 0x7fff}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fd\x00') ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0x6) r3 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7f, @null, @netrom={'nr', 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @default]}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r5, &(0x7f0000001380)=[{&(0x7f0000001100)="d2", 0x1}], 0x1) recvmmsg(r5, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000440)={0x4, 0x7fff, @name="7e4404866db5f118675dcc55d9a122be0085843484f9e0b29eec68731c998dfa"}) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000400)={0x81, 0x800, 0x8001}) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="80000000", @ANYRES16=r4, @ANYBLOB="000025bd7000ffdbdf25040000003800010004000200040002002c0004001400010002004e23ac1e010100000000000000001400020002004e21ac1414bb00000000000000001800050008000100e12a2b59929507484be29a7ed3657468000800010075647000040002000f5c31fe0c00030006000000000000000c000300ac8e000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x810) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x298a1020}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="b4010000", @ANYRES16=r4, @ANYBLOB="ccc426bd7000fbdbdf2510000000080105000800010065746800240002000800010019000000080002000001000008000400050000000800030000f0ffff4c0002000800020000080000080001001300000008000300c9470000080001000b000000080003001000000008000400830000000800030028040000080002000800000008000400ffff0000080001006962000024000200080002000600000008000400050000000800030003000000080001001100000044000200080004003f0000000800020007000000080002001f000000080004000100000008000200000000e00800020001000000080004004000000008000200b54a00001c000200080001000d0000000800020007000000080003001f000000040002003c00090008000200010001000800020007000000080001007d00000008000100010001000800010047000000080001000004000008000200ff000000580004000c00010073797a30000000002400070008000300000000000800030004000000080004000300000008000300010000000c00010073797a31000000000c00010073797a31000000000c00010073797a310000000032a228648db7dd005643f83636cfd3cb7089a134a79f9f4eff04774c4970c4b48552e4c47e89d3ca285e2956265c2a0f3244ecc81301cf0f8c5b9f45b3b82cc59cdff35a71bfa7026c9dd6478399713787fa6eb2ea9decbca667dc1a08365024b4caf4a44289a9211dc6ca0567c2f33fa6265145bb7915592b362fe9442cc795547d8bf2894bf5fa87c1fdab1f555011b2bd4babe4d360b04ca0a92508cd"], 0x1b4}, 0x1, 0x0, 0x0, 0x2}, 0x4000) prctl$PR_GET_NO_NEW_PRIVS(0x27) bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) recvmsg(r3, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:23:10 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001c40)='/dev/dlm_plock\x00', 0x600000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0xffffffffffffffaa, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x1d}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @remote}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001c80)={'vcan0\x00', r4}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/344]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800)='IPVS\x00') getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000440)={'ah\x00'}, &(0x7f0000000480)=0x1e) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000840)={0x34, r9, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'irlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x34}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)={0xa4, r9, 0x4, 0x70bd28, 0x25dfdbfb}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x60) r10 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r11, 0x8927, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000300)={0x14, 0x0, &(0x7f0000000240)=[@register_looper, @clear_death], 0x1e, 0x0, &(0x7f00000002c0)="8b1c49fb4af6ca628c791aba56d8fcf0fb05da96d3f60acbd8db6c0c3402"}) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) [ 434.337599] audit: type=1400 audit(1569723791.275:119): avc: denied { ioctl } for pid=16241 comm="syz-executor.5" path="socket:[78128]" dev="sockfs" ino=78128 ioctlcmd=0x8912 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 02:23:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000000), 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:23:11 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:11 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf25130200006000070008000100020000000c000300020000000000000008000100ffffffff0c0003000000000000000000080002000509000008000100d23100000c00030050000000000000000c00a56768e0e9afa15600000c000300050000000000000014000900080001000600000008000100400000000c0002000800010080d90000380101001c00020008000400060000000800030034a4ffff08000100160000001000010069623a767863616e310000005400020008000300090000000800020019000000080002000100000008000200400000000800020007000000080004000100000008000200040000000800030003000000080004000600000008000400090000001000010069623a766574683000000000100001007564703a73797a30000000001400020008000200040e00000800020007000000440002000800020001000000080003000100008008000400f7ffffff080001000000000008000400000000000800040000f0ffff080001000300000008000300ff0700002c0004001400010002004e22e000000100000000000000001400020002004e20ffffffff0000000000000000100001007564703a73797a3000000000a793533f72b1a3d8793e0cf5ff15cdbc76765d1a72698a151a3acb060cca68ae596fa831282b51fe91c7e12b38271943071e7fea086f55b0f60c857477e33af6b3119f239a9a4d7590a141b52ae3797830ae81e673fa9f3e93d8bdb3fb90f9f8e49da782fe06825c363076cd90b1ad28c50b2f69ed48d0771fad8b54efc7598bd6f412f8ec28922f48da266e6de98b66d0919e3b9424b7bbde04c7aeaeaaac0bd06be7562797fe32fc9bef670ee75082f12370e54d6f43ff98e9a83a318f747c3d391c064c502daeeacac906288ba5232e550b31488e3d195a8746ab8b7631e0666796c64ac346b36a5d72d063b5dbdc7e5b85a7840eac7cc983635eca63"], 0x3}}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:11 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:23:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x103000, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x3, @empty}, 0x6f0116b4) r4 = socket$inet(0x2, 0xa, 0x0) getsockname$inet(r4, 0x0, &(0x7f0000000380)) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000001c0)) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r5, &(0x7f0000001380)=[{&(0x7f0000001100)="d2", 0x1}], 0x1) recvmmsg(r5, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) r6 = dup3(r4, r5, 0xc0000) ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0x9) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000080)=@can, 0x80, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x2}, 0x0) r7 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r7, 0x8927, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}}, 0x9, 0x9, 0x7fffffff, 0x5, 0x4}, &(0x7f0000000300)=0x98) r9 = syz_open_dev$usbmon(&(0x7f0000000340)='/dev/usbmon#\x00', 0x813c, 0x100) ioctl$VIDIOC_G_CTRL(r9, 0xc008561b, &(0x7f00000005c0)) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000500)={r8, @in6={{0xa, 0x4e24, 0x8, @remote, 0xa219}}}, 0x84) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0fa50200", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r11, 0x0, 0x2}, 0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000240)={r11, @in={{0x2, 0x4e23, @multicast1}}, 0xa266, 0x3f22}, &(0x7f0000000180)=0x90) 02:23:11 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:23:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000040), &(0x7f0000000240), &(0x7f0000000280)=0x0) r6 = getgid() r7 = shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000180)=0xc) setuid(r9) r10 = getegid() mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYBLOB, @ANYBLOB="f3d87c3a7ad49397bb46a2437cf72eb4776b246101c23783bdb7adf3467d968d1e8cb5c45336be117c4be7877d1ce240f3723c7fd3879aad59cc7bac3e1d84c2c0fbdd225ab97298b97fa8ddb590c1ab50d2d9f3271c0238aca76dbffbfcdcddb690e8857989c84dc064fe03205ce12aa16ddcbb2206f182d1ac135ad46bf8c63c8e942926100d6c61538836f43494d7e63269acc8d7a37637fabe422af88acff3cae5ff705cfe05de3d932d8258a874582f57e9c1ba36160c51a371c33d", @ANYBLOB="38251693f361ad1c2270ded9556996c72960442646d656933e396917b9bb14a4ddaa83c1c93d859f483022ce472963944a7a694618c6748aa68f64531c99a60c22e8a492240c1b787fdffc210db650f66839a7889d3fb4a6fa2ee7b0729c785a92782498996c43"]) r11 = getpid() sched_setscheduler(r11, 0x5, &(0x7f0000000380)) r12 = getpgrp(0x0) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000000)={{0x100000001, r9, r10}, 0x0, 0x67c2, 0x5, 0x1, r11, r12, 0x7fff}) fstat(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000340)=[0x0, 0xee01, 0xee01, 0x0]) setgroups(0x6, &(0x7f0000000380)=[r4, r5, r6, r10, r13, r14]) r15 = socket(0x1, 0x800, 0x88) r16 = socket$inet(0x2, 0xa, 0x0) getsockname$inet(r16, 0x0, &(0x7f0000000380)) r17 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r17, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r17, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r18, 0x0, 0x2}, 0xc) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r16, 0x84, 0x18, &(0x7f0000000440)={r18, 0x17c}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r15, 0x84, 0x7b, &(0x7f00000004c0)={r19, 0x4}, &(0x7f0000000500)=0x8) 02:23:12 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:12 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:23:12 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:12 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x5, 0xc0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x4}) r3 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, r3}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000100)={r2, r4, 0x9}) r5 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r5, 0x8927, 0x0) futimesat(r5, &(0x7f0000000180)='./bus/file0\x00', &(0x7f00000001c0)) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) r6 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x6, 0x10000) r7 = shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000180)=0xc) setuid(r9) r10 = getegid() mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESDEC=r10, @ANYBLOB='8']) r11 = getpid() sched_setscheduler(r11, 0x5, &(0x7f0000000380)) r12 = getpgrp(0x0) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000000)={{0x100000001, r9, r10}, 0x0, 0x67c2, 0x5, 0x1, r11, r12, 0x7fff}) r13 = shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) r14 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000180)=0xc) setuid(r15) r16 = getegid() mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESDEC=r16, @ANYBLOB='8']) r17 = getpid() sched_setscheduler(r17, 0x5, &(0x7f0000000380)) r18 = getpgrp(0x0) shmctl$IPC_SET(r13, 0x1, &(0x7f0000000000)={{0x100000001, r15, r16}, 0x0, 0x67c2, 0x5, 0x1, r17, r18, 0x7fff}) r19 = shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000180)=0xc) setuid(r21) r22 = getegid() mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESDEC=r22, @ANYBLOB='8']) r23 = getpid() sched_setscheduler(r23, 0x5, &(0x7f0000000380)) r24 = getpgrp(0x0) shmctl$IPC_SET(r19, 0x1, &(0x7f0000000000)={{0x100000001, r21, r22}, 0x0, 0x67c2, 0x5, 0x1, r23, r24, 0x7fff}) setsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={r11, r15, r22}, 0xc) ioctl(r0, 0xf27b, &(0x7f0000000000)) 02:23:12 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, 0x0, 0x0) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:23:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) r2 = socket$inet(0x2, 0xa, 0x0) getsockname$inet(r2, 0x0, &(0x7f0000000380)) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000100)=@can, 0x80, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x2}, 0x0) 02:23:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) r1 = socket$inet(0x2, 0xa, 0x0) getsockname$inet(r1, 0x0, &(0x7f0000000380)) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x30, r1, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 02:23:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0xfffffffffffffe8d}], 0x1, 0x0, 0x0, 0x1e5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x40000, 0x0) 02:23:13 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f00000000c0)={0x5, &(0x7f0000000040), &(0x7f0000001300)=[{0x6, 0x34, 0x1, &(0x7f0000000080)=""/52}, {0x7, 0x49, 0xfffffff7, &(0x7f0000000140)=""/73}, {0x8, 0xa7, 0x8, &(0x7f00000001c0)=""/167}, {0x8, 0x75, 0x423e, &(0x7f0000000280)=""/117}, {0x80000000, 0x1000, 0x9, &(0x7f0000000300)=""/4096}]}) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:23:13 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, 0x0, 0x0) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:23:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) r1 = dup2(0xffffffffffffffff, r0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000080)=""/99, &(0x7f0000000180)=0x63) r2 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, 0x0) r3 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x18520) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0xa}) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:23:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, 0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r3, 0xfff, 0xd8, r4}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r5 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f00000001c0)={'icmp6\x00'}, &(0x7f0000000200)=0x1e) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:23:13 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:23:13 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:13 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, 0x0, 0x0) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:23:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x200400, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000140)={0x0, @reserved}) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:23:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) r1 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, 0x0) accept4$tipc(r2, &(0x7f0000000040)=@name, &(0x7f00000000c0)=0xfffffffffffffdd2, 0xc1800) 02:23:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, 0x0) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000580)={'broute\x00'}, &(0x7f0000000600)=0x78) ioctl$SIOCGIFHWADDR(r1, 0x8927, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_ADDRESS={0x14, 0x1, @remote}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) ioctl$VFIO_GET_API_VERSION(r1, 0x3b64) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=@gettfilter={0x64, 0x2e, 0x0, 0x70bd26, 0x25dfdbfb, {0x0, r6, {0xffff, 0x7ff6}, {0xb, 0x2}, {0x7, 0x6}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x7fff}, {0x8, 0xb, 0x58cb}, {0x8, 0xb, 0x101}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c005}, 0x4000844) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r7 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r7, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r8 = socket$inet(0x2, 0xa, 0x0) getsockname$inet(r8, 0x0, &(0x7f0000000380)) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000440), 0x4) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000640)=0xfffffffffffffe68) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r10, 0x0, 0x2}, 0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={r10, @in6={{0xa, 0x4e22, 0x7fff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}}, [0x7ff, 0x7, 0xfffffffffffff001, 0xe0000000000000, 0xff, 0x3, 0xffffffff, 0x9, 0x9, 0x7, 0x8, 0x0, 0x1, 0x6014, 0x3f]}, &(0x7f0000000000)=0x100) getsockopt$inet_sctp_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000000180)={r11, 0x7fff, 0x3f, 0x4, 0x8, 0x2}, &(0x7f00000001c0)=0x14) recvmsg(r7, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:23:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100000000000000) r3 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, 0x0) r4 = accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) getpeername$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x24001fe) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000300)=0x6e) r5 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r5, 0x8927, 0x0) r6 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r6, 0x8927, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$PPPIOCATTACH(r5, 0x4004743d, &(0x7f0000000240)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:23:14 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:23:14 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x208cc0, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) fsetxattr$security_smack_entry(r1, &(0x7f00000007c0)='security.SMACK64EXEC\x00', &(0x7f0000000800)='/dev/mixer\x00', 0xb, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f00000002c0)={{0xa, 0x6, 0x3, 0x9, 'syz0\x00', 0x7}, 0x1, [0xdb8, 0x8, 0xd6a, 0x400, 0x0, 0x7, 0x4, 0xff, 0x80000000, 0xa57, 0xffd3, 0x9, 0xffff, 0x80000000, 0x3, 0x1, 0x6, 0x9, 0x9, 0xd14c, 0x3bd, 0x7ff, 0xcfe, 0x4, 0xffffffffffffffc1, 0x9, 0x1420, 0x8, 0x2f7, 0x5, 0x101, 0xffffffffffffffff, 0x9, 0x8, 0x100000000, 0x1, 0x0, 0x100000001, 0xe081, 0x0, 0x3f, 0x4, 0xeab5, 0x3, 0x9, 0x3, 0x8001, 0x7, 0x1, 0x101, 0x7, 0x52, 0x80000000, 0x7, 0xe85, 0x8, 0x1, 0x1f, 0x5, 0x2, 0x0, 0x3f, 0x8, 0x3f00, 0x20, 0x5, 0x6, 0x2, 0x1f, 0x101, 0x7, 0x6, 0x8, 0x6, 0x5, 0x0, 0x1000, 0x80000000, 0x40, 0xfffffffffffffff7, 0x3, 0x3b79e3c7, 0x7, 0xd9d3, 0xfff, 0x7fff, 0x7, 0xffffffffffffff03, 0x8, 0x9, 0x8, 0x8, 0x7, 0x6b, 0xff, 0x8, 0x100000001, 0x200, 0xfffffffffffffffb, 0x156, 0x0, 0x3f, 0x1, 0x9, 0x100000001, 0x3, 0x7f, 0xd85, 0x3ff, 0x9, 0xb6, 0x1f, 0x8, 0x9, 0x40, 0x131, 0x0, 0x3, 0x8, 0x13e502d3, 0x7f, 0x0, 0x3, 0x0, 0x3, 0x6, 0x9a, 0x8], {r4, r5+30000000}}) bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x8, {0xc5, 0x96, 0xe1, 0x5, 0x6, 0x10}, 0x7, 0xfb}, 0xe) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000080)={0x0, 0x3}) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x480300, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000001c0)="21519c0d8e86ce7e47b4bb69adc22d6b9aae572417821ba15e86f20a924ed38433397a037bfbe1eb332d839333eebf02da5cf4b0ca0f1d0061ef2c081a11a0469bc3614472bd4c4b10583a52a8f9854519a2171ac269d7ddb17b679f24bb386c8b044a5c4d6aafbd142bc077e481de744dda6cb35562b549c710360a38f847149d82", 0x82) 02:23:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) dup2(r0, 0xffffffffffffffff) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:23:14 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f0000000040)={0x80, 0x0, &(0x7f00000001c0)="d90882a7ee21fb26631f6693f532dd475aaf1edcdeb66ef2955a5c312502f6718b29edcf1120821f0f558542f964e293da9c2a0fd6cbdcb011753460371a78907eff29d7", {0x0, 0x9, 0x455a3887, 0x7, 0x1, 0x3f, 0xe, 0x5}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:23:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000040)="bd9cc11546116cf7a6a5b5af86f3ae84415e515da612319eab112837a664effc147184c0280b4d4a96742d977c54da3157bb90a42aa1bdac4236691867297d20883b5933ebaa89e7361005919c68b080e3d1eafc7dd5f3604a1be1f807091538b9010001001bc2c0f207e2083560aebf83b2954fdf") 02:23:14 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:23:14 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x2000, 0x0) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r2, &(0x7f0000001380)=[{&(0x7f0000001100)="d2", 0x1}], 0x1) recvmmsg(r2, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) signalfd(r2, &(0x7f0000000080)={0x9}, 0x8) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r3, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:23:14 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f00000001c0)={r2, 0x6, &(0x7f0000000080)=[0x4, 0xbf6c, 0x4, 0x0, 0xfffffffa, 0x4], &(0x7f00000000c0)=[0x6], 0x0, 0x1, 0x1ff, &(0x7f0000000140)=[0x0], &(0x7f0000000180)}) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:23:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7ff, &(0x7f0000000180)="02e8a50d5e007c4115bb1a3079ef88b087c51ed85a02000000c9f09cc34b1c6b49f29924d9896694ef706a29894e89c052c0a1c6bddb8c3bf11472ad39d9e259e0c1976f34ec38461f0dc5f5261459223ed7d73a36569b789961a558eddc80666dda4fc91dca0222ea153e1443ddfb04898ff06a") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:23:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xe79) r3 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, 0x0) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0xa) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000400)=0x0) setpriority(0x0, r4, 0xcb5) r5 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000380)) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f00000003c0)={0xa7, 0x8}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000340)={0x42, 0x3, 0x3}, 0x10) preadv(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000000040)=""/23, 0x17}, {&(0x7f0000000280)=""/88, 0x58}], 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r6 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) lremovexattr(&(0x7f0000000440)='./bus\x00', &(0x7f0000000480)=@known='system.advise\x00') socket$vsock_stream(0x28, 0x1, 0x0) 02:23:15 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:23:15 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000040)={0x9, 0x0, 0x6001, 0x200, 0x51, 0x0, 0x9}) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:23:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet(0x2, 0xa, 0x0) getsockname$inet(r1, 0x0, &(0x7f0000000380)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="559e181899613aabe9af5b098c954d3fdea310e3b459425c0ecc9fdb716e75601e3e9a359918f1db364376d90433d30c35c2b724893c2ce51f57b28e51fe8a672b64df8488500cf57cae130f6dc01629f4c6e0b54ff964406c454b9c84fcbfd56b2c35b344f0140c4470e834640c47a0b4da532f46e328108054d1ab0e3ee30e71ed150245dca4d5352450f43a1c9027e1e07a6f7c6daad8851fd2df1f25522c55439bfc4954bce393ee686a9728b95f33e42151c5bfdd3c374d85e7e88da944263db0900db9c12817ee877158487bd7c267430be7bd4488477ede", 0xdb}, {&(0x7f0000000300)="1825e1823aa64381f7b19b386023cb154b29073d509870e9bcb8ca7a4b2c4d953c34b711ab0985c0ca77a3ddadf853acbdcacc8558a679efe89452ae0569860d1eedae861554e555bb123a38433035a6e66a36146e9d2b95e9ca919ff53d52baa95abe6fc3410a8e85f4709790531d5929806d33b138e9130d014ba4bb97cb1a8d3681f248ccc18973ac8ce890cf5023ded549cdade849c4cf250cd1316beb9662b32ca335841809", 0xa8}, {&(0x7f0000000500)="a9c54cf0a7793f9dc182c4ebceac5072ccf991c6e7ed94bdeadda04e86f64666e2a377614721c370652c3ddf85f7c01a3aad831370795360fbe9d68ee5683d4738deb4340505c72cf9587a0b595a57df87a00351d23c7100375ffc6e8c7f499e22580953ce32998a4db345b6b14a25361f42016236d9aad0ed00854fd0ac4a359a3bc4637e76847404449e473e3d42a94f58df359b6baac7671779b44c5f38ca30a813ec97c29695d5505050b984888fc2e9de99fa64c8dc87cb41eed34153d73a6c55d08d28bedf06f05d9f6223151f926dc023d1347f1e864c4a9a23bef6b1a7ae472c18596bd991d6", 0xea}], 0x3, 0x9) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r2, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:23:15 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf25130200006000070008000100020000000c000300020000000000000008000100ffffffff0c0003000000000000000000080002000509000008000100d23100000c00030050000000000000000c00a56768e0e9afa15600000c000300050000000000000014000900080001000600000008000100400000000c0002000800010080d90000380101001c00020008000400060000000800030034a4ffff08000100160000001000010069623a767863616e310000005400020008000300090000000800020019000000080002000100000008000200400000000800020007000000080004000100000008000200040000000800030003000000080004000600000008000400090000001000010069623a766574683000000000100001007564703a73797a30000000001400020008000200040e00000800020007000000440002000800020001000000080003000100008008000400f7ffffff080001000000000008000400000000000800040000f0ffff080001000300000008000300ff0700002c0004001400010002004e22e000000100000000000000001400020002004e20ffffffff0000000000000000100001007564703a73797a3000000000a793533f72b1a3d8793e0cf5ff15cdbc76765d1a72698a151a3acb060cca68ae596fa831282b51fe91c7e12b38271943071e7fea086f55b0f60c857477e33af6b3119f239a9a4d7590a141b52ae3797830ae81e673fa9f3e93d8bdb3fb90f9f8e49da782fe06825c363076cd90b1ad28c50b2f69ed48d0771fad8b54efc7598bd6f412f8ec28922f48da266e6de98b66d0919e3b9424b7bbde04c7aeaeaaac0bd06be7562797fe32fc9bef670ee75082f12370e54d6f43ff98e9a83a318f747c3d391c064c502daeeacac906288ba5232e550b31488e3d195a8746ab8b7631e0666796c64ac346b36a5d72d063b5dbdc7e5b85a7840eac7cc983635eca63"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x82402, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x200, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x2) r2 = socket$inet(0x2, 0xa, 0x0) getsockname$inet(r2, 0x0, &(0x7f0000000380)) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000080)=0x4, 0x4) 02:23:15 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:23:15 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf25130200006000070008000100020000000c000300020000000000000008000100ffffffff0c0003000000000000000000080002000509000008000100d23100000c00030050000000000000000c00a56768e0e9afa15600000c000300050000000000000014000900080001000600000008000100400000000c0002000800010080d90000380101001c00020008000400060000000800030034a4ffff08000100160000001000010069623a767863616e310000005400020008000300090000000800020019000000080002000100000008000200400000000800020007000000080004000100000008000200040000000800030003000000080004000600000008000400090000001000010069623a766574683000000000100001007564703a73797a30000000001400020008000200040e00000800020007000000440002000800020001000000080003000100008008000400f7ffffff080001000000000008000400000000000800040000f0ffff080001000300000008000300ff0700002c0004001400010002004e22e000000100000000000000001400020002004e20ffffffff0000000000000000100001007564703a73797a3000000000a793533f72b1a3d8793e0cf5ff15cdbc76765d1a72698a151a3acb060cca68ae596fa831282b51fe91c7e12b38271943071e7fea086f55b0f60c857477e33af6b3119f239a9a4d7590a141b52ae3797830ae81e673fa9f3e93d8bdb3fb90f9f8e49da782fe06825c363076cd90b1ad28c50b2f69ed48d0771fad8b54efc7598bd6f412f8ec28922f48da266e6de98b66d0919e3b9424b7bbde04c7aeaeaaac0bd06be7562797fe32fc9bef670ee75082f12370e54d6f43ff98e9a83a318f747c3d391c064c502daeeacac906288ba5232e550b31488e3d195a8746ab8b7631e0666796c64ac346b36a5d72d063b5dbdc7e5b85a7840eac7cc983635eca63"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x4d07d563d9ca80a2) r3 = geteuid() ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000000c0)={0x9, 0x1ff, 0xffffffffffffffff, 0x0, r3, 0x0, 0x2, 0xf79}) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:23:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r2, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x4, {0x40, 0x8, "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", 0x79, 0x7, 0x0, 0x0, 0x6, 0x9, 0x40, 0x1}, r2}}, 0x128) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xffffffff00000000, 0x2000) 02:23:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r4 = socket$kcm(0x2b, 0x1, 0x0) r5 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r5, 0x8927, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r5, 0xc0286415, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0xd02, 0x0, 0x20, &(0x7f0000007000/0x4000)=nil}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:23:16 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x400000000000058, 0x0) 02:23:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0x7, 0x4) 02:23:16 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, 0x0) accept4$nfc_llcp(r2, 0x0, &(0x7f0000000000), 0x40800) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) r3 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, 0x0) bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r4 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r4, 0x8927, 0x0) getsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:23:16 executing program 1: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) r0 = open(&(0x7f0000000040)='./file0\x00', 0x84840, 0x210) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000080)=0xf000) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ioctl(r1, 0xfffffbfffff3ffa3, &(0x7f0000000000)) [ 439.683436] audit: type=1800 audit(1569723796.665:120): pid=16612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=17155 res=0 02:23:16 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r3, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000000)=0x1000, 0x4) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r4 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r4, 0x8927, 0x0) linkat(r3, &(0x7f0000000200)='./bus\x00', r4, &(0x7f0000000240)='./bus\x00', 0x1000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000000380)=0xe8) ioprio_set$uid(0xab0c0b4803c34e00, r6, 0x5) ioctl$VIDIOC_SUBDEV_G_CROP(r3, 0xc038563b, &(0x7f0000000040)={0x1, 0x0, {0x8, 0x101, 0x1000, 0x1ff}}) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f00000001c0)={0x1, 0x8, 0x0, 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:23:16 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x400000000000058, 0x0) [ 439.754595] audit: type=1800 audit(1569723796.705:121): pid=16613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=17155 res=0 02:23:16 executing program 1: r0 = shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000180)=0xc) setuid(r2) r3 = getegid() mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESDEC=r3, @ANYBLOB='8']) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = getpgrp(0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x100000001, r2, r3}, 0x0, 0x67c2, 0x5, 0x1, r4, r5, 0x7fff}) ptrace$setregs(0xffffffffffffffff, r4, 0xfc01, &(0x7f0000000180)="e6118109ff3a323dcdb26675d4982df10d88059b728bf313d3d2d92c9cf4dca58b9f5234b58f73497d8ec67b9b521c1e98f53a1c65cbc72f482893768ce1875af6625635cf04b47c9c8cc751ea179436ed349acbc323601e98f7541549d0df02751cf75e7ce0516c78a8db260c637c7f709a0ec8ea322834c2f360e79469c66fc66356457b593112bf80d0ee32831da193c36c") syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r6, &(0x7f0000001380)=[{&(0x7f0000001100)="d2", 0x1}], 0x1) recvmmsg(r6, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) ioctl(r6, 0xfffffbfffff3ff9f, &(0x7f0000000000)) 02:23:16 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:17 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:23:17 executing program 1: socketpair(0x5, 0x0, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x7, {{0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, [], 0x1c}, 0x2}}}, 0x88) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r1, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:23:17 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, 0x0, 0x0, 0x0) 02:23:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) clone(0x300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x3) keyctl$join(0x1, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000200)='}\x00\x0e\xbdD\xbe\xb2\x99\xc4\xfb\xc3\xa4%y\x16%r\xd5\xd47\x13\xd77\x13\x10<\xbc\x90^U\a\x15k\xf7\xb9\x0e`\'\f\xab{L\xa9\x14\x85\xd0\xbc\x9fE\xdc\xccFE\xb7\xdf\x9d\xf1\xdb\xb2\xa9\xc3W\a\x97\x96\x87Q]S\xcfm\xfc\xb8J\xcc\xd9\xe6,u\x9dS\xac\xa7;\x8b1t\x92\xcc?\xd5#\xee)}Dy\xf9\xc5\xde', 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:23:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000007000/0x18000)=nil, 0x0, 0x66, 0x0, 0x0, 0xffffffffffffffde) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x100, 0x0) write$cgroup_type(r3, &(0x7f0000000040)='threaded\x00', 0x9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r4 = socket$kcm(0x2b, 0x1, 0x0) r5 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r5, 0x8927, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x1, 0xb1, 0x9, 0x81, 0x0, 0x1, 0x14910, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_bp={&(0x7f00000001c0), 0xd}, 0x20000, 0x2, 0x6, 0x0, 0xf0, 0xc41, 0xff}, r5, 0x6, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:23:17 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x98) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r1, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:23:17 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) r1 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0500000000000006ce827fd7d5a72a000800000000000000010000020000000000000044000000000000000600000000000000"]) socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:23:17 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r3, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:17 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:17 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, 0x0, 0x0, 0x0) 02:23:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:23:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:23:18 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) dup(0xffffffffffffffff) sendmmsg(r1, 0x0, 0x0, 0x0) 02:23:18 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:18 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r3, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:19 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELUID(r0, 0x89e9, &(0x7f0000000100)={0x3, @default, 0xee00}) [ 442.100077] syz-executor.2 uses old SIOCAX25GETINFO 02:23:19 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:19 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(r0, 0x0, 0x0) 02:23:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000200)={0x0, 0x0, 0x20cf, {0x1000000}, [], "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", "c940c1a8e544783437002d4e26e2a27d1c4f8109be33ec4acff18979118e3d89658465c20a662075a558d63479eb9b480892b6b4d0931d8d3a6d4c239022ed3f9a689d2f12f2b18cd4c78a9e694ecb02c4884b0b12fc789dca9142740dad3db8e51002cf6473673db3609db205c860e9c59ded7c0e1375fe7952cce2aaedb0f80477bb42f6746bc64d3db321cd8665935e70719cfd680087f24d3de890cf4614d0285def43a28135de64d2e88b841e400d3bddda90e41cc6afbba8fed49661b70aa7e25c68b81e8a62d753b06820aa34557a234753880f7d366e63e46eb5ff864fbe7505562456f25cb7d314d331a160d01f8d6139b6f40eb2a0a75a91a9478ce551772f99f06cd4e0569af82659bed110f440af8ee7aab7209deeaf895c2d007182654d7bae00144d36de838dc8cc709e594793497568287854e381ea50dd844dd9bcf811d4f3fe4b4c9fdb8e427e67b624968c822506345fbd63193a66505c1f0878aea9c0565c301bfea63b4b65c6eff4ba7ca51eab4ed82c4e0b6cde7692d59a0a791fe944cadf3cc6009b344654c0fc4dbeed6d1ab3ff41afc9cd628cb4dc775c99253993485b2dea04d79a3174a4e8a1d34d9768f63023a514ef449e19704b2c2dab6309092bcb9331ad4f6450549a1c42c7d7fbe47775b0b7ee14ac3fd00fbb7f68799dc08f5e603869dc8253d2a2beaddfa12df21e0117ac66e885afd3d4e16739eabc53841369348634ee864923160a9f0f16502c00af61d9c23e37af2d0fa850ced93ed3c045238465402acb42de5acd0cd6b6e1db8f0017b98c4bc7d98f8638a23bac8a0df28d50b6efa6c40e82a23c8a092aff799ac6bd31d626e93675a778f0b5e185ca8314ca35fcb506507891d7946d59a5a98a0fc3abe6bc254fde2e591e10fb73ca1d6cd07519916adb304f67370add0b0860ba650b33b3834cbc760b1a72c5df46c10500000000000000cc3784f6119165b0e6c395e249fd054f029f3da3912c8e22a2172a5746deed60b713e2c3c0c5371aabc75fed32b55d418634287d682dfffe22e9af7b246146ecbd881d8f8eb07c4e91fc67ddaec6ffeb42c7a09056b5314a1f58741f2bd7c3d255306944c234cd1eee6fd1f06b92a36415e87074b1d37562305f4c0fad37a5b4d883ec90e84148357e23ff336eb5f06231b9195c6a553ac93c2cb1ed4d326784379743d4f73c3e1c92a95eea809972c11f7c02d090f8e7bc3d6a2590731498c0d1d578613746d3463214de83329389de395e4732c6a139f20078eb243aa0a63a2f0bde6ceab86bdbf260cfc16531456972cecfed2e74988a85c19a6af0169d8622c6683a7a3e8def8163e9a762a89e1b3c31fe73ebcc0e0bce92126e0e9809722e7832123d9ca6ad0ce7e109940cdf8995fe67a3c00e83248714eaa1c5e17e2ba313e904f4c4c72438b5320aa90f651d87eefcc1782f83cae6faf3980053daee30e0e111db83e3dcae2961a0ebbe097121ba81bddfde7694f6ea5449661c4a9179c22841846d52dddccd20db6e0e6f0f905bd6bf32a6ee27d6ac161d348661564bb768ec314cbc74b3f87f3500b666eeb8261e8cf80e47de2ba9f98aea30fb4b835eb3b2fd9fa0378a16a9f951b9381c2611ff44a416a1a05308cbc05ec194a197cda90e0b562771943b2576322d2ef6f01fb1a27a6d5aa865fc8bce3a00f7039a326987255cc958f9f598c153278b45fe127c49bf45c2a1bab6609eaeb32030f2d09e581994571ece7a78ce935d7737cc4c892d8508b9127e810073736f3c2ef1cc0944afc96e3e8a93479d25119df537be85afe33a85d4b1affcdb038aff31550be50e53dee06a8d7cdc3d9605a2dc8d6d83733d69a685f4d881a87ed91fc185047e418216f9215b56d786fec45dd0c6a140906f836b74c78c492c115f3a0ecb9a0c656faef47f243e89c4e33372a31eeb47bfa26297dbcc2818ab0dc488bc1f226be0c1c5913d4dfd9a651d8e951134f4d265857302d197d6255730f66d109f12a1e785ec4b20c4523c39754f24c65ab12a1463461f639d462972a89ab1658e33f49adeb989ed51c4e60b68acc1177f9d02f97f0d1906c31e850bd5ebe75d1a7774b490928bf4b6983993323891628f3a0365f953875796ba9fb36f3998a743aab874e6f1e3ac734e4266a4b8d9affdc0ba38b94754f4ff24fd38b4c298c0bc9ff800ee702a07389a565e83a2a63c63537fd0da62e9affda0eaead59f78d055bf80c10fe417b26cd5e115b55e62b5bfeca73e50063b803645f79d687df001e3b0a5345537a8a32af997f354a1d3821c946f6394f378db7a17d68917be22a28400fd2342853f46052ec803691636aa76a0df4abf3859231fa1460082671f0ed35c3657d2d850de9eb7b19465a006fe6c76d1d38e731421ccda7071bfd7a56f7dc29e5c611fbbd25c1d7b2a290f886a8cacc0ecb72697b5974b4fd13c63f74575334f00982044a31c6d17d7c50e070d6e1abb18ca3133dffd81589855c6d9282f38490ebb21c41c93bc30d2e09d3089c6f44d33e1419949a8fe1c7d669cbc74e16648df9582a04de998e5515f400797d338e8b845b112e4bd98380412a4d3990c02ab99653180b82a756f7d484dd7441ddeed05c9c9f695346d495585f28d5381c8315708bf44c5147de31daf067227bf6960896fdb0b5a5326d49a7d54d3288d01a2c241755e065756556d8fba9ab01008733b8ce80a331e87d647dc88d8bbaff5e26261b85ab579f72845c5e038e6af14eda5db3e4c186be8fcee4960cd9eac56db408283f33860569f54a5327ac45bc58240bff8fb88fa75c889efb2cba78cf78d81b2e35be5b232b16c5fd1752c3a4899d5739af1dc7a42c448ce321fa7200f0241051652f7313abbcee7798d33d95a4dad55da856262bd2ed96c9203bfbcba9e2ced6a2eeb0d8f09852928b33c12e360c7ecae89636c6fa3bb3c479d220f47ed794bd1a5c87df72b6b3ca30662d30f67a5eced891772c928deb7e0f41aeed653d3f7ad7569e377d3ed0e5fa18a143b00ea9e5cb344ea01b698df47c62ec6b8694ffa9ae243f4a984583c2490377c0dd27d252b245ba641412a0d078bef7090c9821fa39b7709009d8ba53f3e97a8573432689d3990fb719490c2b5e11b97554943dc84e2771102db51901ce3ea321bb97034fb5e6d5036e0b712c7d4ffc458e8c4c5ff3e01b6c37832a0255c42476c424db90b077a87f93233d47fdf4889709f6cadc47990932cd629e9d4318b1ef1e390b419371ed2a1ab7ba58de80bf677b7aecd11ade17fdee858e8f4fc8f6b7da75552841fc6365c6145e9216e286f62e4f9e83151a6d0844669c944550c3dca60b8aa7eb0a34ad58f803116cc369a1c1e22c6b00a1dd3a39b097be869ba0f3b0a341491f71e6800f43989cad382f15c1b956d3eaa9ddcd06216d8e7df9967af70ae000c7ea0dc2dae97fd0fbd9d3928a638afa6e34ed115bf8977e44ca9ce5d95934c1639cfe45256237d3393bf60daae3cf1ac634d0dde8e439635dca184f7deb81ee8de359de69c59a5644471ebd5defbe59201b5c4a5a47071ac77e407379475adcf325d898d0a55bb78e10b3729cea30513c18072af3ff8130c668e5d76167babfadce478901a208ab772dde1f9326513a752977572f651ad1f5143d079b776a7c99aa8564867d70ab49c8986f9ff5939ad6ad2f8e7c9c1175e4da87109375893da0dcce894cd159be8ec751b3f0b65cefc76e2dd06a477f9be49a691e7c974fd4b136dda027c079b7ea72675ad67f79f437c04ae72861d623c07e66651240844f6a2170d808c9f5e760aeee15429bc80a5d5fc970798eb3a047191aca0ce922539bd5618faf477696cff3b8021318d41c1801d46b73f64821ebda7fb61c54c99a5f04d5fc4766d8b5d63a35aed47d953012cd2df223fd97e369bc17ebd52042609eea8f605d0b178fc9ce774d1bab31849463b5d2618b095f90f8a626c5c36403fa3bcf1064001adf528fde4a6b9f2ff8d71ede754e2ab3c6da1a5f99b6a66617115a3ce55290818821f169cb93d7d75e5ca506bcf7a07fd67f7e4f6c846b9654028f1cc2b1b9e40f6a7d6181175e41c0d6aa1f8bfbeb6e9cc740a67ffd0c07e061b498489824904e2c9401e48969685aa2d924bc35a65fc980d13a41c03b97cbf09b3610fb7703fd06576484a4a0c39959c739b54e955e4b38247b9410cd33a304920d12788ca01063b0cadcbc39443305691f9b3036f5fd3260f778a56461e38e0e81e3bf1c92f56a1af0317f7328b4442cd1ec2da4f556bf7cb53cb9c47e5d1a208ff8eb93ce93bd3d4ea24f501aa0958bfbeb68e4895c4a66b450a6406ca52182b8eb44996e428b8706410a84de3a38db19b7f4ad7378a96adf5c35ed8dbddc30ed484ae870f81df8c7ad8974ff96227d94872c59ab49066264d302eeb4ca84354de7625357fdf722f0ec46c4bcc26c19aa10b232eaba785044d2e8c20def9f2e33213df496e5caa56049965e468d19e91bb7ada306956259ab9d6bf3d5f1f5384cab39a64199821940ca3763c67e691029b2bd0cfce8c78d77f7fa2dee6476185076969853ed0299e86c5a6dbd0b1122726769e82894badccf4773fc1e0569d319475bb9eee07fa9cbcdf82f58a9a3d8e5aa4585406363c0700271f3b292d5b4f4daa6238c55f59d81f7c871cedbbcd39109879f3415bcc7f75b8b71b3a685f70b9b22df8b495ff268c7797a6c84a6f5fe2ce18ccb4a2cfb4d1295d42f2d4f1ec7612edd6349a2df09b3c9cb1da07afa330135d2cbeaa425d4accdcbd59e70b1edf19243d975178dbf708e4473493e4a17af627ba2e8f69d59b6afbad8b70e3b2a1e20dd123d3a569ab07218bae4fe7d93714be1cb70f01a3f16e00c6567e746ce6e482f3b2886cc153f75335232a70be5455bb98cc117d175c525cdb7c90d85d2db6c911c5766291e8f564bfec51e95a45c61f5252b3db909d578525e1ecfa96b0a9bfa364538bcb158a0ec56c0de9e9f4efdab836fc1b9eb8bf99ffb4944e9e9d121497246cad84524b3459d1c6a0f7a3370046ec47a6131a2c50c24d36db9f6198627afa7c677a4b384cfa4b91f95924bd228dccdba477b0e3bdb6dea9328e9ad49748225651d3cbc85ce88635a10fae506143412b6581bc378482837c0faf31e94f4768917e2d8140ce86c7b1a7cad46e61ba023dbcbde55c0fae994dbe7255c48c0be2e7ffcde644b8de5018227f32ecb9445bba819b2d09dffd69725ebb5de59ccd9d969c7b7b89bdf9297d57bcdfac7f378319aebaf282e39fdd667e4e35798a3b773e408bdcc89e29023d2a796951e474b84b7bafc0751642b8de341b6d25108daffc09df2a033beef67f7db6118bd928fa8aed45a1d5c76ee4bf92c49c8f53f451589028412ffc00e54696e9c96ee1e3249d432d04f5291ba0334ca8600cbd3f1715e52dd8c10721735f5d0215001becc5a7495bf28af92d51e8c28ecfdf5c1195c677615633d847511b378d32f3289e7f5f5d52fbeb038616e185efba108927a29b0485fd4354713d51b61f48aadd91a23411f3e5395b09ee2722607d0267164f026349347d02d7f809aca1406e9041adb29bd0f74486abb24204999120c3eedf89ab1cd7c9bbba0419168ecebb125a77e0f3e748574617e1359b37d604ea1688fcf4a6c2d6c91733c207f9455c34b8cae014dbf5d7752a9ae6f0cc5c762208485db426b7e201c5929fb76b302c41c79db0a0fa4d2ac99100"}) 02:23:19 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf25130200006000070008000100020000000c000300020000000000000008000100ffffffff0c0003000000000000000000080002000509000008000100d23100000c00030050000000000000000c00a56768e0e9afa15600000c000300050000000000000014000900080001000600000008000100400000000c0002000800010080d90000380101001c00020008000400060000000800030034a4ffff08000100160000001000010069623a767863616e310000005400020008000300090000000800020019000000080002000100000008000200400000000800020007000000080004000100000008000200040000000800030003000000080004000600000008000400090000001000010069623a766574683000000000100001007564703a73797a30000000001400020008000200040e00000800020007000000440002000800020001000000080003000100008008000400f7ffffff080001000000000008000400000000000800040000f0ffff080001000300000008000300ff0700002c0004001400010002004e22e000000100000000000000001400020002004e20ffffffff0000000000000000100001007564703a73797a3000000000a793533f72b1a3d8793e0cf5ff15cdbc76765d1a72698a151a3acb060cca68ae596fa831282b51fe91c7e12b38271943071e7fea086f55b0f60c857477e33af6b3119f239a9a4d7590a141b52ae3797830ae81e673fa9f3e93d8bdb3fb90f9f8e49da782fe06825c363076cd90b1ad28c50b2f69ed48d0771fad8b54efc7598bd6f412f8ec28922f48da266e6de98b66d0919e3b9424b7bbde04c7aeaeaaac0bd06be7562797fe32fc9bef670ee75082f12370e54d6f43ff98e9a83a318f747c3d391c064c502daeeacac906288ba5232e550b31488e3d195a8746ab8b7631e0666796c64ac346b36a5d72d063b5dbdc7e5b85a7840eac7cc983635eca63"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f0000000480)) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:19 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:20 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x7c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:20 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x7c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, 0x0) r3 = socket$inet(0x2, 0xa, 0x0) getsockname$inet(r3, 0x0, &(0x7f0000000380)) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) r4 = gettid() r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r5, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000080)='.^\x00', r6}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={r4, 0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', r6}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00', r6}, 0x30) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000840)={0x34, r9, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'irlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x34}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x84010001}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)={0x164, r9, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5de}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa26}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfffb}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="c996f4ffeab64dd266ba0e746db005c7"}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x81}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x3}}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xb0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x800}, 0x0) read(r7, &(0x7f0000000500)=""/194, 0xc2) 02:23:20 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x7c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:20 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r3, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:20 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f0000000480)) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:20 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x7c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x0, 0x1, 0x2}}, 0x14) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) r1 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, 0x0) r2 = syz_open_pts(r1, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, 0x0) openat$cgroup_ro(r3, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) r4 = syz_open_dev$usbmon(0x0, 0x45, 0x0) ioctl$KDDISABIO(r4, 0x4b37) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000280)) ioctl$sock_SIOCGPGRP(r4, 0x8904, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r4, 0xc0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xa, 0x2}, 0x0, 0x0, &(0x7f0000000640)={0x3, 0x10, 0x4, 0xfe3}, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=0x6}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840)=r5, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r5, 0x4) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000080)) 02:23:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet6_dccp_int(r1, 0x21, 0x3, &(0x7f0000000000)=0x2, 0x5b) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:23:21 executing program 3: write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x4, {0x0, 0xc}}, 0x20) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@generic={0xb0e1f2143f8fb8bc, 0x6, 0x6}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x6, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000240)=0x100001, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x8, 0xa000) accept$unix(r2, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f00000003c0)={{&(0x7f0000000300)=""/135, 0x87}, &(0x7f00000001c0), 0x2}, 0x20) 02:23:21 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x7c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x1, 0x2) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000180)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200082, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f00000002c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x4, {0xa, 0x4e21, 0x40, @remote, 0x9}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x10, 0xfa00, {&(0x7f0000000080), r4}}, 0x18) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000080), r4}}, 0x18) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:23:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x8002}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_ifreq(r5, 0x8922, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_map={0x1ff}}) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000040)={'eql\x00\x00\x00\xa9[\x00', @ifru_settings={0x85, 0x0, @fr=0x0}}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r6, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r6, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0x80, 0x0, 0x0, &(0x7f00000000c0)=""/2, 0x2}, 0x20002000) getuid() 02:23:21 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x7c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000180)=0xc) setuid(r3) r4 = getegid() mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESDEC=r4, @ANYBLOB='8']) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) r6 = getpgrp(0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000000)={{0x100000001, r3, r4}, 0x0, 0x67c2, 0x5, 0x1, r5, r6, 0x7fff}) getresuid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0xc14, &(0x7f0000000200)={'trans=unix,', {[{@mmap='mmap'}, {@noextend='noextend'}, {@msize={'msize', 0x3d, 0x5}}, {@cache_fscache='cache=fscache'}, {@access_any='access=any'}, {@access_uid={'access', 0x3d, r3}}, {@version_L='version=9p2000.L'}], [{@smackfsfloor={'smackfsfloor'}}, {@subj_user={'subj_user'}}, {@permit_directio='permit_directio'}, {@subj_type={'subj_type', 0x3d, '/dev/dri/card#\x00'}}, {@fowner_lt={'fowner<', r7}}, {@dont_measure='dont_measure'}]}}) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:23:21 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf25130200006000070008000100020000000c000300020000000000000008000100ffffffff0c0003000000000000000000080002000509000008000100d23100000c00030050000000000000000c00a56768e0e9afa15600000c000300050000000000000014000900080001000600000008000100400000000c0002000800010080d90000380101001c00020008000400060000000800030034a4ffff08000100160000001000010069623a767863616e310000005400020008000300090000000800020019000000080002000100000008000200400000000800020007000000080004000100000008000200040000000800030003000000080004000600000008000400090000001000010069623a766574683000000000100001007564703a73797a30000000001400020008000200040e00000800020007000000440002000800020001000000080003000100008008000400f7ffffff080001000000000008000400000000000800040000f0ffff080001000300000008000300ff0700002c0004001400010002004e22e000000100000000000000001400020002004e20ffffffff0000000000000000100001007564703a73797a3000000000a793533f72b1a3d8793e0cf5ff15cdbc76765d1a72698a151a3acb060cca68ae596fa831282b51fe91c7e12b38271943071e7fea086f55b0f60c857477e33af6b3119f239a9a4d7590a141b52ae3797830ae81e673fa9f3e93d8bdb3fb90f9f8e49da782fe06825c363076cd90b1ad28c50b2f69ed48d0771fad8b54efc7598bd6f412f8ec28922f48da266e6de98b66d0919e3b9424b7bbde04c7aeaeaaac0bd06be7562797fe32fc9bef670ee75082f12370e54d6f43ff98e9a83a318f747c3d391c064c502daeeacac906288ba5232e550b31488e3d195a8746ab8b7631e0666796c64ac346b36a5d72d063b5dbdc7e5b85a7840eac7cc983635eca63"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r3, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:21 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f0000000480)) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) [ 444.681537] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready 02:23:21 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x7c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:21 executing program 1: r0 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000040)=0x7, 0x4) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r2, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:23:21 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x7c) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x6ca041, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000000)=0x42, 0x1) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:23:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001180)='/selinux/enforce\x00', 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x6) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x31, 0x2, @thr={&(0x7f0000000140)="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", &(0x7f0000000040)="ad201bcc9fe5553716491111f1184d54e7b3c1bc99a517443a5c2c513c190d10daa88f3edc493399e9c5cca9f23ce035a2c99af94173a78903c9d78d6e68fcf671648a17c89b35e730832144a9aef9c92b3bb348fb"}}, &(0x7f0000001140)=0x0) timer_getoverrun(r2) 02:23:22 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x7c) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:22 executing program 5: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus/../file0\x00', 0x80, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000002c0)="660f3823684b6766c744240060dfb6fa6766c74424022f193f666766c744240600000000670f011424ba4000b003eeb8ac008ee0440f20c0663509000000440f22c00f5a851ae766b90c0200000f328fc9e8023690000fc75a0366b9880100000f32", 0x62}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x101eb, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r4, 0x8927, 0x0) r5 = open(0x0, 0x101000, 0x8) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x0}]}) r7 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r7, 0x8927, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000240)={0x8, 0x1, {0x3, 0x1, 0x59, 0x3, 0x5}}) timer_create(0x0, &(0x7f00000004c0)={0x0, 0xa, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000500)=0x0) timer_delete(r8) timer_getoverrun(r8) ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, &(0x7f0000000200)={r6, 0x1}) ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f0000000000)={r6, 0x1}) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) r9 = dup2(0xffffffffffffffff, r5) ioctl$DRM_IOCTL_AGP_RELEASE(r9, 0x6431) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:23:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)=0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000300)={0x90, 0x0, 0x3, {0x5, 0x2, 0x1000, 0x10001, 0x0, 0x7fffffff, {0x5, 0x401, 0x5, 0xfffc, 0x7, 0xc2ce, 0x9, 0x1ff, 0x0, 0x6, 0x8, r1, 0x0, 0x1, 0x8}}}, 0x90) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) socket$rds(0x15, 0x5, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000080)={{0x1, 0x0, @identifier="b3dcd01d0a9fd4b97d83841600a02867"}, 0x56, [], "1d6132ad1250904d5e471aa657ac8204595baa39c13a00abac1feb45cdc5ecd31e3a83dd6c0e6c10acb2921a82a875b80ce178e5820619423ebdba8fa741f96355b18238c129ed7a7aadca51b6db51df6e81f550894c"}) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x102000, 0x0) sendto$inet(r4, 0x0, 0x14b, 0x0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) recvmsg(r2, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:23:22 executing program 1: r0 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={r1, 0x8, 0x7, 0x101, 0x80, 0x5}, 0x14) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x6, 0x1) ioctl(0xffffffffffffffff, 0x1, &(0x7f0000000000)) 02:23:22 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r3, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:22 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:22 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x7c) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000000)="c4e27d21be147f2ce7640f011a3e260f080f01c9f30f2a9f000000000f1c36c4c20993a45200000000c4c135fe790236f30f09360f0fe08a"}], 0x1, 0x0, 0x0, 0xfffffffffffffcae) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffeffff, 0x4002) ioctl$VIDIOC_SUBDEV_G_EDID(r4, 0xc0285628, &(0x7f00000000c0)={0x0, 0xffffffc1, 0x7a6, [], &(0x7f0000000080)=0x81}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:23:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket(0x10, 0x5, 0x7) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x0, 0x5, 0x1f, 0xfe, 0x3, 0x6}) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x40, 0x180) ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f00000000c0)=0x800) 02:23:23 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000580)="b80a008ec00fc7ac8d7e66b9800000c00f326635000400000f30f33ed9ec0f09b802008ed066b98b0900000f32263ef30f090f01c566b9800000c00f326635000100000f30", 0x45}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000300)=0x8) r3 = socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x28}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) r4 = shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) r5 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r5, 0x8927, 0x0) recvfrom$ax25(r5, &(0x7f00000001c0)=""/105, 0x69, 0x40004142, &(0x7f0000000280)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @default]}, 0x48) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000180)=0xc) setuid(r7) r8 = getegid() mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="f8fb4ae828184a4799137889b1496f3600000000bfcc986cc271ab2b22018a5914685ae3d42a48d81bfc4ba3850b9fb58de04acfe65b58a1b1e7b137ef23cc", @ANYRESHEX=r1, @ANYRESDEC=r8, @ANYRES16=0x0]) r9 = getpid() sched_setscheduler(r9, 0x5, &(0x7f0000000380)) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000000340)={0x9, 0x1, 0x3f, 0x0, 0xb8}) r10 = getpgrp(0x0) shmctl$IPC_SET(r4, 0x1, &(0x7f0000000000)={{0x100000001, r7, r8}, 0x0, 0x67c2, 0x5, 0x1, r9, r10, 0x7fff}) getpgrp(r10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:23:23 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) getsockname$inet(r1, 0x0, &(0x7f0000000380)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x8080, 0x0) r3 = socket$inet(0x2, 0xa, 0x0) getsockname$inet(r3, 0x0, &(0x7f0000000380)) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000600)='/selinux/policy\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0xa, 0x0) getsockname$inet(r5, 0x0, &(0x7f0000000380)) r6 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r6, 0x8927, 0x0) r7 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r7, 0x8927, 0x0) r8 = socket$inet(0x2, 0xa, 0x0) getsockname$inet(r8, 0x0, &(0x7f0000000380)) r9 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r9, 0x8927, 0x0) r10 = accept$netrom(r9, &(0x7f0000000900)={{0x3, @null}, [@rose, @rose, @default, @null, @remote, @netrom, @default, @default]}, &(0x7f0000000980)=0x48) r11 = syz_open_dev$mouse(&(0x7f00000019c0)='/dev/input/mouse#\x00', 0x80000001, 0x484001) r12 = socket$unix(0x1, 0x2, 0x0) bind$unix(r12, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r12, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r12, &(0x7f0000000340), 0x0) recvmmsg(r12, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) r13 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/ubi_ctrl\x00', 0x311100, 0x0) io_submit(0x0, 0x7, &(0x7f0000001b40)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x6, r1, &(0x7f00000001c0)="4778d464d2d567c0103da46746e1ba1dce884885c944075f914a048662dd7048efc52cbb362e7ec91cfb651a2d2d4f0b424463e11fe1a0f32b822deed42a652607d495790e575db83decb28cb5e3158cb044c58a20b7c280d27da26e08b5840fa70a3325b72ac33c583150691844615281844e22b128e4c8a3211a100c3c56c2077e6ce89ee546ddf4b27bf20a1c8e5a7e82e26bfc837a9f62a8d9c1ccc9bb542c5e3c495d04d9aab13808a40e650f79433ece5a16ac8f8f90453842e4c3e035ea59f08043a37351aab35be8", 0xcc, 0x1, 0x0, 0x0, r2}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x950, r3, &(0x7f0000000500)="33c46699a2161a740012ace31668376a3a64af003345cd9c6b4564ec6e39998e7c179cf0be5d638f406769826c597dc79cc966ea993d374383d6980540ddad7e4f3e3d9cbf2962e1b295cf5201291eabfe81929b61960e2b924c96c668fc74e333495909b2226f56640e4290588213b84cb37fb875fbfc383dc3996f6d8d8d75f5dc11e77e515bd4f5c61fff62437f31c27a337bffc2dcbc400d7ceb4998cb894d38892cf8a10cdc135b490ee3b632d6e6c44b173525b3917db967fbc2595e64eeac42", 0xc3, 0x1, 0x0, 0x2, r4}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x6, 0xff, r5, &(0x7f0000000680)="8d53c4dd37ed095b68f962fcdffa55d1b6ad7029a2c622fc080704bfe76abd07b78f4ec89af4e15a0eb19059d84639fea82c6ad324304891deda9464445b64e1ac82e3c115e43e10b19ede032119d8b040ca18e2854ee02e066236bcdbbe3e4bde5651f4735796e1a6b54679d564c8d66da1a53216a3ae0894e26da8bad99e496e44c834f3c05ed8d4f0", 0x8a, 0x9, 0x0, 0x2, r6}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000000780)="64baa694af7cc817c3ecb64654af95c494bf7cc377a7854a7864a2843675b82c601629eebff3685e9525b56a2622ad8513ddc75e40d2fc3e290d22de9ef1b5a86aba2f8547a73d31dfa54f8dcf0ea1f5f8d0df66cb5a1950eb859481d549ed774ad30bab4a8dc2dd33ddad4f25fa059a9d17cb1065cc4edf31da7bcc72af8c343445ff50b3487f98ff71fed23c413ede1157d189099ff9d532aea84679388562c6bd9c3ef813", 0xa6, 0x5, 0x0, 0x2, r7}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0xc, 0x0, r8, &(0x7f0000000880)="eb30f3f600241d001b9f", 0xa, 0x2be, 0x0, 0x2}, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x2, 0x81, r10, &(0x7f00000009c0)="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", 0x1000, 0xfffffffffffff947, 0x0, 0x0, r11}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x6, 0x3, r12, &(0x7f0000001a40)="45b5466a375b6735309b27c577002bc315c4dac3a6945f1dc151a535d82d7f945661ec8e5b34e783cdc97e06630110b6c378aee70fe4329a03f7d0cc62ed6d98523a51c785c851325cb4444566f41cae79d07a5f34f3e704b5360a12f127a5f00b2ab8f4e1bd9fe0d64759212b1b27", 0x6f, 0xe0, 0x0, 0x1, r13}]) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) r14 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x40, 0x0) sendmsg$nfc_llcp(r14, &(0x7f00000002c0)={&(0x7f0000000080)={0x27, 0x0, 0x1, 0x3, 0x6, 0xfd, "19666823d972b9920586ce4400c1f14b560a5d0daac2ee311c69fd9cf4d1e887c00c6f192c4b85291185e30cf9669cf418a091ba551e5c4d0b207b0f72175c", 0x2b}, 0x60, &(0x7f0000000180)=[{&(0x7f0000000140)="9cb2062ba507616d7b37929f0ad26c35831824c2b548b32fc21b49b3841ecdb434a6fac85d80fa", 0x27}], 0x1, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0xe0, 0x8040000}, 0x4000) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:23:23 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) recvmmsg(r1, &(0x7f0000001ec0)=[{{&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000100)=""/141, 0x8d}, {&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000380)=""/247, 0xf7}, {&(0x7f0000000500)=""/82, 0x52}, {&(0x7f0000000580)=""/172, 0xac}, {&(0x7f0000000640)=""/160, 0xa0}, {&(0x7f0000000700)=""/65, 0x41}], 0x7, &(0x7f0000000800)=""/243, 0xf3}, 0x3}, {{&(0x7f0000000900)=@can, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000000)=""/38, 0x26}, {&(0x7f0000000980)=""/191, 0xbf}, {&(0x7f0000000a40)=""/208, 0xd0}, {&(0x7f0000000b40)=""/160, 0xa0}, {&(0x7f0000000c00)=""/160, 0xa0}, {&(0x7f0000000cc0)=""/4096, 0x1000}], 0x6, &(0x7f0000001d40)=""/226, 0xe2}, 0x3}, {{&(0x7f0000001e40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/42, 0x2a}], 0x1}, 0x200}], 0x3, 0x20002000, &(0x7f0000001f80)={0x77359400}) bind$tipc(r2, &(0x7f0000001fc0)=@nameseq={0x1e, 0x1, 0x1, {0x4, 0x1, 0x1}}, 0x10) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:23:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0xaaaaaaaaaaaad8d, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:23:23 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r3, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:23 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:23 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x7c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0xaf, 0x1) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200800, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r2, 0x200, 0x70bd25, 0x25dfdbfe, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x81, @media='ib\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x20048880}, 0x34800) 02:23:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bind$rds(r1, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:23:24 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x7c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:24 executing program 1: r0 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) open(0xfffffffffffffffe, 0x480000, 0x1) syz_mount_image$reiserfs(&(0x7f00000001c0)='reiserfs\x00', &(0x7f0000000200)='./bus\x00', 0xa32b, 0x4, &(0x7f0000000400)=[{&(0x7f0000000240)="49a673c671e0eb3398cabd7ee19eb4a3f89497fd3d213f479cb608d55c2d0dd92895f04986e7235eeac8c5c8f61510b96528081765a1729eff32762d94e029aeda876cb80c116425b5595a8bbb58928de5e0c060b9698ea38930dd604a0138d424cc5bd541eca4893a33899fef8dcf88c6d89aed8a51d0b94a353bf84f50ca7dc0a4ed3c7647fc2976595cb5", 0x8c, 0x5326800000}, {&(0x7f0000000300)="7eed90dc38e39dba46cc9d0dbafccdd21371fb6bb68a1c1fd94c81d5a1419fd17ffea0131cc8bd42fced8cfd02c8e0c74e480b728bf0c45864d15ad97a097f25a2", 0x41, 0x80}, {&(0x7f0000000380)="3a6ad24f3aaa1e07b1cbd1b865c49ab3985909b37e55d1bed8c694d9d375450e67de7a659c67dd07aab741b995cbcd4ddf52781ca8fcb746", 0x38, 0x6}, {&(0x7f00000003c0)="39ccc24b483cc90fca70cd097bd90bb8f042d85ef623f2f2d4f8680620241af80b151164040821fe99fcd7678cab18a1bbbfa067ea1abb2b45fbd7dab63179", 0x3f, 0x7ff}], 0x40008, &(0x7f0000000480)=ANY=[@ANYBLOB="726573697a653d3078303030303030303030303030303030332c6578706f73655f70726976726f6f742c6e6f757365725f7861747405000000000000003d636f6e74696e75652c646174613d77726974656261636b2c75737271756f74612c726f6f74636f6e746578743d73797374656d5f752c646f6e745f686173682c00"]) ioctl$SIOCGIFHWADDR(r0, 0x8927, 0x0) accept$nfc_llcp(r0, &(0x7f0000000140), &(0x7f00000000c0)=0x60) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x5, 0x500842) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1, 0x7b160bfaa1381183) ioctl$SIOCGIFHWADDR(r2, 0x8927, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000040)=0x1) ioctl(r1, 0xfffffbfffff3ffa3, &(0x7f0000000000)) r3 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r4, 0x8927, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000540)={0x7, 0x1b, 0x1}, 0x7) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000500)='hybla\x00', 0x6) 02:23:24 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x7c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x0, 0x38a100) r4 = shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000180)=0xc) setuid(r6) r7 = getegid() mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESDEC=r7, @ANYBLOB='8']) r8 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0xfe0, 0xb31d96747173c9b) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = getpid() sched_setscheduler(r9, 0x5, &(0x7f0000000380)) r10 = getpgrp(0x0) shmctl$IPC_SET(r4, 0x1, &(0x7f0000000000)={{0x100000001, r6, r7}, 0x0, 0x67c2, 0x5, 0x1, r9, r10, 0x7fff}) write$P9_RGETLOCK(r3, &(0x7f00000000c0)={0x27, 0x37, 0x1, {0x0, 0xfffffffffffffff7, 0x47, r9, 0x9, '/dev/kvm\x00'}}, 0x27) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000000)="0f20d835080000000f22d8f33e0f015a2a0f350fc79d020000003e36650f01cbb9bc0a0000b8800c0000ba000000000f3067f20f2d0bb8010000000f01d90f01c4b910090000b800000000ba008000000f30", 0x52}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r11 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:23:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) r2 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, 0x0) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f0000000000)) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:23:24 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r3, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x5, 0x40) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:23:24 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:24 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x7c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:apm_bios_t:s0\x00', 0x20, 0x1) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000000)) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r2 = socket$inet(0x2, 0xa, 0x0) getsockname$inet(r2, 0x0, &(0x7f0000000380)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f00009fd000/0x600000)=nil, &(0x7f0000bdb000/0x3000)=nil, &(0x7f0000e09000/0x4000)=nil, &(0x7f0000aa2000/0x4000)=nil, &(0x7f0000cd0000/0x1000)=nil, &(0x7f0000f6a000/0x3000)=nil, &(0x7f0000fdf000/0x4000)=nil, &(0x7f0000c63000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000cc5000/0x4000)=nil, &(0x7f0000001500)="bd83d3581ac0c9399b5e22b0a66c65d61123f91e103ef20ff38c64de44a324b1db02230c37deb70f27a3a5d6b12c14dfbb1f62d610ff2449f766c9fcd649ee23eece4391cacad69f1d7d0a433026e2b363c7162497911c0f36c4b897c3ed6b98b1fe4190c4615707069fcdd4d0fac012ce507886984e6e8eaaa55b6b8ba05ff1265a46371e0ffbb916063fef8757bd68eddb6edd02835ef94a0206d2410cd5508165e7e864269d4f4958fe67627c0281c1f1918308ff7f13dd19e3048ead23077d40e9e1fcae0bbaca348f7a1941a9c818d1ceaf0138119a61ca889f1bcb75a582", 0xe1, r2}, 0x68) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/validatetrans\x00', 0x1, 0x0) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f00000001c0)) r4 = socket$inet(0x2, 0xa, 0x0) r5 = socket$inet(0x2, 0xa, 0x0) getsockname$inet(r5, 0x0, &(0x7f0000000380)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000300)={0xee1ff812b25c6f02, 'sit0\x00'}, 0x18) setsockopt$inet_dccp_buf(r4, 0x21, 0xe, &(0x7f0000000500)="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", 0x1000) getsockname$inet(r4, 0x0, &(0x7f0000000380)) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:23:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, 0x0) r2 = accept$ax25(r1, &(0x7f0000000040)={{0x3, @null}, [@default, @netrom, @rose, @bcast, @netrom, @default, @default, @rose]}, &(0x7f00000000c0)=0x48) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) r3 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, 0x0) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f00000001c0)) 02:23:25 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000000)={0x4, 0x9f}) 02:23:25 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x7c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:25 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x7c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:25 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000400)='/dev/admmidi#\x00', 0x4, 0x430800) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0x8, 0x84f, 0xff, 0x8}, 'syz0\x00', 0x35}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000380)={0x2, r3, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r5 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x100, 0x0) r7 = dup(0xffffffffffffffff) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000003c0)=0xda) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x6}}, 0x3, 0x7ff}, &(0x7f0000000040)=0x90) r9 = open(&(0x7f0000000140)='./bus\x00', 0x400200, 0x0) ioctl$SIOCGIFHWADDR(r9, 0x8927, 0x0) setsockopt$netrom_NETROM_IDLE(r9, 0x103, 0x7, &(0x7f0000000340)=0x8, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000280)={r8, @in={{0x2, 0x4e20, @broadcast}}, 0x4, 0x4, 0x81, 0x6, 0x40}, 0x98) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:23:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000240)=""/217, &(0x7f0000000040)=0xffffffffffffff61) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) r2 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, 0x0) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000080)={0x7, 0x9, 0x7}) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:23:25 executing program 2: mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x7c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:25 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r3, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0xa0c00) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f00000000c0)=0x2, 0x0) ioctl(r0, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:23:25 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf25130200006000070008000100020000000c000300020000000000000008000100ffffffff0c0003000000000000000000080002000509000008000100d23100000c00030050000000000000000c00a56768e0e9afa15600000c000300050000000000000014000900080001000600000008000100400000000c0002000800010080d90000380101001c00020008000400060000000800030034a4ffff08000100160000001000010069623a767863616e310000005400020008000300090000000800020019000000080002000100000008000200400000000800020007000000080004000100000008000200040000000800030003000000080004000600000008000400090000001000010069623a766574683000000000100001007564703a73797a30000000001400020008000200040e00000800020007000000440002000800020001000000080003000100008008000400f7ffffff080001000000000008000400000000000800040000f0ffff080001000300000008000300ff0700002c0004001400010002004e22e000000100000000000000001400020002004e20ffffffff0000000000000000100001007564703a73797a3000000000a793533f72b1a3d8793e0cf5ff15cdbc76765d1a72698a151a3acb060cca68ae596fa831282b51fe91c7e12b38271943071e7fea086f55b0f60c857477e33af6b3119f239a9a4d7590a141b52ae3797830ae81e673fa9f3e93d8bdb3fb90f9f8e49da782fe06825c363076cd90b1ad28c50b2f69ed48d0771fad8b54efc7598bd6f412f8ec28922f48da266e6de98b66d0919e3b9424b7bbde04c7aeaeaaac0bd06be7562797fe32fc9bef670ee75082f12370e54d6f43ff98e9a83a318f747c3d391c064c502daeeacac906288ba5232e550b31488e3d195a8746ab8b7631e0666796c64ac346b36a5d72d063b5dbdc7e5b85a7840eac7cc983635eca63"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:25 executing program 2: mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x7c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x42800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:23:26 executing program 1: r0 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, 0x0) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{}]}) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) ioctl(r1, 0xfffffbfffff3ffa3, &(0x7f0000000000)) 02:23:26 executing program 2: mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x7c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0x80, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x2}, 0x0) 02:23:26 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x7c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:26 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x7c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:26 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r3, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:26 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:26 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x7c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) r3 = dup(r1) write$UHID_INPUT(r3, &(0x7f00000001c0)={0x8, "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", 0x1000}, 0x1006) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:23:26 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x7c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:27 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x7c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x4000, &(0x7f0000000200)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x400, 0x0) unlinkat(r2, &(0x7f00000000c0)='./file0\x00', 0x400) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x1ae, &(0x7f0000000000)=""/2, 0x38}, 0x0) 02:23:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) socket$kcm(0x2b, 0x1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect(r3, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x6873cf9d5128b182}, 0x80) r4 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x400000) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xadda) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:23:27 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x7c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:27 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x7c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:27 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:27 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r3, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000700)=0xe8) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000300)={0x15, 0x110, 0xfa00, {r4, 0x4, 0x0, 0x0, 0x0, @ib={0x1b, 0x200, 0x1, {"272e7e3fef40378624e87e85c47ec596"}, 0x40400000000000, 0x93, 0x1}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}}}, 0x118) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@newqdisc={0x3c, 0x24, 0x201, 0x70bd29, 0x25dfdbfb, {0x0, r2, {0x5, 0xfff1}, {0x5, 0x7}, {0x5, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa284}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:23:27 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x7c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:27 executing program 5: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x3, 0x4, &(0x7f0000001380)=[{&(0x7f00000001c0)="79bdd878bcbfae3d3ff1c9df2258882e9bf2d739a976adbda39af468632af858e42b3d36d26d49a520867e4f269287563dcba681394e51bf6aa5e951684f23432da725872a7e489dffcd75e6e3e177d9176e14a67803c74635387ba3f6672a936d092a49f1f5f7846fbf5eb0dae32f616f91c99175c9411e91aaf43f29af9c618c2dc0ecb88b30be9087cde28773", 0x8e, 0x81}, {&(0x7f0000000280)="0542362d46139774970de19ebc03b9eef5e4b673541709200cce522b66c316e9a865c64a9a9a8f69d55b491f97ba8d9d3241d5ef57c051e905f7fae8d3e0c664048b421549ec25c99a67dff9526240", 0x4f, 0x800}, {&(0x7f0000000300)="332f102e6179e8469149442a19a24a2d51b1e764f0144de037e61a012d9639e4cba692d33059e1fd4cb67d02d0577da74a2d870831747ad0b38f64772a26d26f08d6c20270200bbc17c936669ad6bcf8ca1310b5e1687324646d9232ed183df10e34951e25b96e9c0b", 0x69, 0x3}, {&(0x7f0000000380)="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", 0x1000, 0x1}], 0x21, &(0x7f0000001400)={[{@disable_sparse_no='disable_sparse=no'}, {@errors_recover='errors=recover'}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:23:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0xfffffffffffffff9, 0x1000) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:23:28 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x7c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000000000/0xaab000)=nil, 0xaab000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r4, 0x0, 0xcf, &(0x7f0000000ffc), 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r5 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400000, 0x0) ioctl$SG_GET_COMMAND_Q(r6, 0x2270, &(0x7f0000000040)) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:23:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0xe04841, 0x0) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000080)=0x4) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:23:28 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(0x0) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x7c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:28 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf25130200006000070008000100020000000c000300020000000000000008000100ffffffff0c0003000000000000000000080002000509000008000100d23100000c00030050000000000000000c00a56768e0e9afa15600000c000300050000000000000014000900080001000600000008000100400000000c0002000800010080d90000380101001c00020008000400060000000800030034a4ffff08000100160000001000010069623a767863616e310000005400020008000300090000000800020019000000080002000100000008000200400000000800020007000000080004000100000008000200040000000800030003000000080004000600000008000400090000001000010069623a766574683000000000100001007564703a73797a30000000001400020008000200040e00000800020007000000440002000800020001000000080003000100008008000400f7ffffff080001000000000008000400000000000800040000f0ffff080001000300000008000300ff0700002c0004001400010002004e22e000000100000000000000001400020002004e20ffffffff0000000000000000100001007564703a73797a3000000000a793533f72b1a3d8793e0cf5ff15cdbc76765d1a72698a151a3acb060cca68ae596fa831282b51fe91c7e12b38271943071e7fea086f55b0f60c857477e33af6b3119f239a9a4d7590a141b52ae3797830ae81e673fa9f3e93d8bdb3fb90f9f8e49da782fe06825c363076cd90b1ad28c50b2f69ed48d0771fad8b54efc7598bd6f412f8ec28922f48da266e6de98b66d0919e3b9424b7bbde04c7aeaeaaac0bd06be7562797fe32fc9bef670ee75082f12370e54d6f43ff98e9a83a318f747c3d391c064c502daeeacac906288ba5232e550b31488e3d195a8746ab8b7631e0666796c64ac346b36a5d72d063b5dbdc7e5b85a7840eac7cc983635eca63"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r3, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:28 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:28 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(0x0) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x7c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000080)=@can, 0x80, 0x0, 0x21b, &(0x7f0000000000)=""/2, 0x27c}, 0x40) r2 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000100)={0x0, 0x3f, 0x7fffffff, 0x7e6, 0x12, 0xff, 0x3, 0x9, 0x4, 0x6, 0x800, 0x7}) 02:23:29 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(0x0) open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x7c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0xffffffffffffffc6}], 0x1, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfdae, 0x4c, 0x0, 0x242) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000240)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x1c) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000002c0)={r5, 0x8}, 0x8) r6 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000001280)=ANY=[], 0x0, 0x1) r7 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r7, 0x8927, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200000, 0x0) syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0xfffffffffffffffe, 0x5010c0) r8 = creat(&(0x7f00000001c0)='./bus\x00', 0x2) ioctl$KVM_RUN(r8, 0xae80, 0x0) 02:23:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) socket$nl_crypto(0x10, 0x3, 0x15) r2 = open(&(0x7f0000000140)='./bus\x00', 0x208040, 0x24) ioctl$SIOCGIFHWADDR(r2, 0x8927, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) recvmsg(r2, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xffffff30, 0x0, 0xca2f191, &(0x7f0000000000)=""/2, 0xfdbb}, 0x0) 02:23:29 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(0x0, 0x40140, 0x7c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) [ 452.389318] audit: type=1400 audit(1569723809.375:122): avc: denied { create } for pid=17327 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 02:23:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) [ 452.595601] cgroup: fork rejected by pids controller in /syz2 02:23:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x210c00, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000002c0)={@multicast2, @rand_addr=0x2, r4}, 0xc) r5 = socket$kcm(0x2b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:23:30 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(0x0, 0x40140, 0x7c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:30 executing program 4: creat(0x0, 0xffffffffffdffffe) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) r1 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r3, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:30 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x40000000015, 0x5, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r4, 0x8927, 0x0) openat(r4, &(0x7f0000000100)='./bus\x00', 0x448040, 0x1) ioctl$VIDIOC_G_MODULATOR(r3, 0xc0445636, &(0x7f0000000080)={0x80, "f30646b295e8decc2143f1da5cb30b8b12e650cafa94f612688e3ea1f1ddd31e", 0x200, 0x5, 0x1000, 0x4}) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000180)=0x3, 0x4) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x4e21, @loopback}, 0xffffffd7) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r6 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r6, 0x8927, 0x0) ioctl$KDGKBENT(r6, 0x4b46, &(0x7f00000001c0)={0x0, 0x11, 0x3468}) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:23:30 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(0x0, 0x40140, 0x7c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:30 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 02:23:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v1={0x1000000, [{0x1, 0x8}]}, 0xc, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:23:30 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x0, 0x7c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:30 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x0, 0x7c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:31 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:31 executing program 4: creat(0x0, 0xffffffffffdffffe) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="01002bbd7000fddbdf25130200006000070008000100020000000c000300020000000000000008000100ffffffff0c0003000000000000000000080002000509000008000100d23100000c00030050000000000000000c00a56768e0e9afa15600000c000300050000000000000014000900080001000600000008000100400000000c0002000800010080d90000380101001c00020008000400060000000800030034a4ffff08000100160000001000010069623a767863616e310000005400020008000300090000000800020019000000080002000100000008000200400000000800020007000000080004000100000008000200040000000800030003000000080004000600000008000400090000001000010069623a766574683000000000100001007564703a73797a30000000001400020008000200040e00000800020007000000440002000800020001000000080003000100008008000400f7ffffff080001000000000008000400000000000800040000f0ffff080001000300000008000300ff0700002c0004001400010002004e22e000000100000000000000001400020002004e20ffffffff0000000000000000100001007564703a73797a3000000000a793533f72b1a3d8793e0cf5ff15cdbc76765d1a72698a151a3acb060cca68ae596fa831282b51fe91c7e12b38271943071e7fea086f55b0f60c857477e33af6b3119f239a9a4d7590a141b52ae3797830ae81e673fa9f3e93d8bdb3fb90f9f8e49da782fe06825c363076cd90b1ad28c50b2f69ed48d0771fad8b54efc7598bd6f412f8ec28922f48da266e6de98b66d0919e3b9424b7bbde04c7aeaeaaac0bd06be7562797fe32fc9bef670ee75082f12370e54d6f43ff98e9a83a318f747c3d391c064c502daeeacac906288ba5232e550b31488e3d195a8746ab8b7631e0666796c64ac346b36a5d72d063b5dbdc7e5b85a7840eac7cc983635eca63"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) r1 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r3, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = socket(0x5, 0x5, 0x2) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) add_key(0x0, 0x0, &(0x7f00000000c0)="f00b7168f536e62119eef5f7c9bf8a276cb8013132b1dd48e24a0a6ea82d6a31aa19749b54943fc77a04a89574c54073151093ae2bc5684a66383a7c8096fee56aa616db5b53fa21f4782de4f6cd8c1fa73ee17e779bc4c5055765fda3e7b379bcef963a0b3f3ba8d668df3a7f33c46c8dd677febfd171aa0d0cd2325eac7615b86a4c13180bd85a7d1f0852468fe9ed5200f38595a9a958ec66", 0x9a, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x9, &(0x7f0000000180)=0x0) io_submit(r3, 0x1, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000140)="100000400300"/16, 0x40000010}]) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:23:31 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x0, 0x7c) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000200)="66b829018ec066b8e7000f00d80f3235d220000f3066baf80cb8c8f61a8eef66bafc0ced0f787e00c4e1817cb500800000c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x51}], 0x1, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x10) r4 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r4, 0x8927, 0x0) r5 = accept4$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c, 0x800) r6 = socket$inet(0x2, 0xa, 0x0) getsockname$inet(r6, 0x0, &(0x7f0000000380)) fcntl$dupfd(r5, 0x406, r6) r7 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r7, 0x8927, 0x0) getdents(r7, &(0x7f0000000280)=""/117, 0x75) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x2, r3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r8 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000001c0)={0x400, 0x1, 0x67, 0xfffc}, 0x8) 02:23:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xd457, &(0x7f0000000100)="ff1932fa825b4eddd50121481a6c4413a01b1125b97b2848eb0a91d7ca5923466451c87eaaec06de6b9ebe7272b9b3cd387e98511155957fcd8c85d2343b260f5da619ad057b2bbaaaa8062e178de6b72a4d7afcf5730c5d28") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x8, &(0x7f0000ff9000/0x4000)=nil, 0x5) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0x80, 0x0, 0x0, &(0x7f00000000c0)=""/2, 0x2}, 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x100) 02:23:31 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000500)="11dca50d5e0000e47bf07056e2897e463e3b24b0abd11d5adcde139cac86dd95eb28fb65a7150f1d4304c8148ce43122b4ea362d9ad45ed4b7465e88a48b52f6897aec4278d9b4d096003058d4edb494c79361d04c6a121f5c21504db3c2724292a643c00da6cf6acede413747921335e39a94aaa0f9ed1ff59cc62a218bfc3859cb28565fc40fd99ec9c9812b34689f912e2fbd99cc577f87ea4a60e54a43203650e8efe4997eda6afdba5b9c3a5c0489757ead732577a5f612f3100e357846593631bb39836e757c57f10635074a3d3b7b860000000044b8053363f73fe06878102f1695a24e17137852adb14dbd0a158e02bc9506a4b42ec4725403aceecc3baa1f6ad07f9871c6f4bee632d6e09476c26d5c48cd3ef0a4e1d6e4612304662eb69c157b843fb3a4d29c4360437196f4721f30b11002b24808dfe32c337b6516103da0b376bd29dde0f79a91dd5005538b44dab6003a5e67ba142b7b187b40932ef77f701f38a1dc36da233227feb81e8b3ad2b4bf93b3625709145b82feedacabf82116fa9d976e89043440bcec2a52") r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r1, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, 0x0) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000000)="54abf916262da509aabc887a9e75c875ae3fffac7e7f26674591ac486fd0688f4c2e9a176580907ec86efa0476b5ff7666c58ed08751837f93157260e7bc24b2a53c478dc146cffafa2ee724bcd22e2b04ded1e7b3d912dc376e639753013727b4a8f1a7185b6d53fd981c3862fa") 02:23:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x301000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000300)="650f07440f20c066350b000000440f22c00f01d1660f3a61b6000016f3ab6766c7442400f6ffffff6766c74424023b0000006766c74424060000000066b9800000c00f326635001000000f300e29be1212660f3a0cbe00000067ae660f69bf0001c0fe"}], 0xaaaaaaaaaaaad91, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setxattr$security_evm(0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES16], 0x1, 0x0) r5 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r5, 0x8927, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x9) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:23:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0x3}, 0x4) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0xfffffef9) recvmsg(r2, &(0x7f00000004c0)={&(0x7f0000000280)=@can, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) 02:23:31 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:32 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r3, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:32 executing program 4: creat(0x0, 0xffffffffffdffffe) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="01002bbd7000fddbdf25130200006000070008000100020000000c000300020000000000000008000100ffffffff0c0003000000000000000000080002000509000008000100d23100000c00030050000000000000000c00a56768e0e9afa15600000c000300050000000000000014000900080001000600000008000100400000000c0002000800010080d90000380101001c00020008000400060000000800030034a4ffff08000100160000001000010069623a767863616e310000005400020008000300090000000800020019000000080002000100000008000200400000000800020007000000080004000100000008000200040000000800030003000000080004000600000008000400090000001000010069623a766574683000000000100001007564703a73797a30000000001400020008000200040e00000800020007000000440002000800020001000000080003000100008008000400f7ffffff080001000000000008000400000000000800040000f0ffff080001000300000008000300ff0700002c0004001400010002004e22e000000100000000000000001400020002004e20ffffffff0000000000000000100001007564703a73797a3000000000a793533f72b1a3d8793e0cf5ff15cdbc76765d1a72698a151a3acb060cca68ae596fa831282b51fe91c7e12b38271943071e7fea086f55b0f60c857477e33af6b3119f239a9a4d7590a141b52ae3797830ae81e673fa9f3e93d8bdb3fb90f9f8e49da782fe06825c363076cd90b1ad28c50b2f69ed48d0771fad8b54efc7598bd6f412f8ec28922f48da266e6de98b66d0919e3b9424b7bbde04c7aeaeaaac0bd06be7562797fe32fc9bef670ee75082f12370e54d6f43ff98e9a83a318f747c3d391c064c502daeeacac906288ba5232e550b31488e3d195a8746ab8b7631e0666796c64ac346b36a5d72d063b5dbdc7e5b85a7840eac7cc983635eca63"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) r1 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r3, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:32 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x3dd, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$kcm(0x2b, 0x1, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x547203, 0x0) write$FUSE_INTERRUPT(r4, &(0x7f00000002c0)={0x10, 0x0, 0x6}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r5, &(0x7f0000001380)=[{&(0x7f0000001100)="d2", 0x1}], 0x1) recvmmsg(r5, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) getsockname$inet(r6, 0x0, &(0x7f0000000380)) r7 = open(&(0x7f0000000140)='./bus\x00', 0x41, 0x0) ioctl$SIOCGIFHWADDR(r7, 0x8927, 0x0) setxattr$security_evm(0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYPTR=&(0x7f0000000840)=ANY=[@ANYRESDEC=r0, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYPTR64, @ANYRESDEC=r1, @ANYRES64, @ANYRESOCT=0x0, @ANYRES16, @ANYRES64, @ANYBLOB="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", @ANYRES64=r0]], @ANYBLOB="889b9bf3b53d469fb1023bf27a52d0f1f7da4602e7ddb845553683b005c63f7326dc59096d7e4b6575eff30fa4352ff9cd015048804ab53d540d0d5d34ee59439cce6407b3b8e048edf19eb3b155ac49a56ca4f49dfeb2366ce1f1b7a6d355f1c5d04ceff0f623b34853dca48cb866647ea9540f8577211e82518069be4a94b232dcc50ef2844bb4"], 0x2, 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_GET_KEEPCAPS(0x7) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x109001, 0x0) r8 = add_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r9 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) fchmod(r3, 0x48) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000140)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r9) r10 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r9, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000001d80)={'syz', 0x1, 0x2e}, r10) keyctl$link(0x8, r8, r9) 02:23:32 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x7c) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) [ 455.458553] ================================================================== [ 455.466362] BUG: KASAN: null-ptr-deref in kvm_write_guest_virt_system+0x64/0x90 [ 455.473926] Write of size 24 at addr 0000000000000000 by task syz-executor.5/17570 [ 455.481659] [ 455.483327] CPU: 1 PID: 17570 Comm: syz-executor.5 Not tainted 4.19.75 #0 [ 455.490267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 455.499644] Call Trace: [ 455.502262] dump_stack+0x172/0x1f0 [ 455.505916] ? kvm_write_guest_virt_system+0x64/0x90 [ 455.511042] kasan_report.cold+0x199/0x2ba [ 455.515310] check_memory_region+0x123/0x190 [ 455.519759] memset+0x24/0x40 [ 455.522882] kvm_write_guest_virt_system+0x64/0x90 [ 455.527917] handle_vmread+0x7fe/0xa10 [ 455.531831] ? handle_invpcid+0xa80/0xa80 [ 455.535997] ? __lock_is_held+0xb6/0x140 [ 455.540077] ? __lock_is_held+0xb6/0x140 [ 455.544290] ? handle_invpcid+0xa80/0xa80 [ 455.548455] vmx_handle_exit+0x276/0x16b0 [ 455.552727] ? lock_acquire+0x16f/0x3f0 [ 455.556712] ? vcpu_enter_guest+0xf15/0x5ed0 [ 455.561146] vcpu_enter_guest+0x10ca/0x5ed0 [ 455.565493] ? kvm_vcpu_ioctl+0x181/0xf90 [ 455.569742] ? emulator_read_emulated+0x50/0x50 [ 455.574427] ? lock_acquire+0x16f/0x3f0 [ 455.578418] ? kvm_check_async_pf_completion+0x2d8/0x440 [ 455.583979] kvm_arch_vcpu_ioctl_run+0x457/0x16b0 [ 455.588838] ? kvm_arch_vcpu_ioctl_run+0x457/0x16b0 [ 455.594656] kvm_vcpu_ioctl+0x4dc/0xf90 [ 455.598653] ? kvm_vcpu_block+0xcc0/0xcc0 [ 455.602813] ? mark_held_locks+0x100/0x100 [ 455.607071] ? __might_fault+0x12b/0x1e0 [ 455.611148] ? __fget+0x340/0x540 [ 455.614617] ? find_held_lock+0x35/0x130 [ 455.618693] ? __fget+0x340/0x540 [ 455.622188] ? kvm_vcpu_block+0xcc0/0xcc0 [ 455.626348] do_vfs_ioctl+0xd5f/0x1380 [ 455.630248] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 455.635824] ? selinux_file_ioctl+0x125/0x5e0 [ 455.640353] ? ioctl_preallocate+0x210/0x210 [ 455.644781] ? selinux_file_mprotect+0x620/0x620 [ 455.649661] ? iterate_fd+0x360/0x360 [ 455.653559] ? nsecs_to_jiffies+0x30/0x30 [ 455.657731] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 455.663372] ? security_file_ioctl+0x8d/0xc0 [ 455.668499] ksys_ioctl+0xab/0xd0 [ 455.671970] __x64_sys_ioctl+0x73/0xb0 [ 455.675970] do_syscall_64+0xfd/0x620 [ 455.679790] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 455.685016] RIP: 0033:0x459a29 [ 455.688294] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 455.707216] RSP: 002b:00007fe91fa46c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 455.714949] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a29 [ 455.722242] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 455.729538] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 455.736833] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe91fa476d4 [ 455.744147] R13: 00000000004c2ddb R14: 00000000004d6618 R15: 00000000ffffffff [ 455.751451] ================================================================== [ 455.758826] Disabling lock debugging due to kernel taint 02:23:32 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x7c) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 02:23:32 executing program 3: r0 = shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000180)=0xc) setuid(r2) r3 = getegid() mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESDEC=r3, @ANYBLOB='8']) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = getpgrp(0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x100000001, r2, r3}, 0x0, 0x67c2, 0x5, 0x1, r4, r5, 0x7fff}) getpriority(0x0, r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="11dca50d5e0000e47bf070") r7 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f00006dbffc)=0x1, 0x4) bind$inet(r7, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r7, &(0x7f00000004c0)={&(0x7f0000000280)=@can={0x1d, 0x0}, 0xb4, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x38}, 0x0) r9 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xffffffffffff7fff, 0x200001) ioctl$sock_inet6_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000080)={@mcast1, 0x79, r8}) 02:23:33 executing program 0: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x4000) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r3, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) 02:23:33 executing program 4: creat(0x0, 0xffffffffffdffffe) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000004c0), &(0x7f0000000480)=0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x40) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a00000021472aefe41c4301889c91ff7f000000001600aa20475d9f02d3869feeed860e6cb5da323ae0cad7cb69050046b653e1010000000000000041374611"], 0x10}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000100)=[0xffff, 0x80000001, 0x0, 0x80000000, 0xbb]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x198, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x44}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x75}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff2c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x636f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0a0000}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe00}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x954}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r4, &(0x7f0000007e00), 0x400000000000058, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) [ 456.057677] Kernel panic - not syncing: panic_on_warn set ... [ 456.057677] [ 456.062249] kobject: 'loop4' (00000000015e55f1): kobject_uevent_env [ 456.065187] CPU: 0 PID: 17570 Comm: syz-executor.5 Tainted: G B 4.19.75 #0 [ 456.079991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 456.089816] Call Trace: [ 456.092421] dump_stack+0x172/0x1f0 [ 456.096064] ? kvm_write_guest_virt_system+0x64/0x90 [ 456.097505] kobject: 'loop4' (00000000015e55f1): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 456.101237] panic+0x263/0x507 [ 456.101253] ? __warn_printk+0xf3/0xf3 [ 456.117786] ? kvm_write_guest_virt_system+0x64/0x90 [ 456.122914] ? preempt_schedule+0x4b/0x60 [ 456.127080] ? ___preempt_schedule+0x16/0x18 [ 456.131603] ? trace_hardirqs_on+0x5e/0x220 [ 456.135970] ? kvm_write_guest_virt_system+0x64/0x90 [ 456.141083] kasan_end_report+0x47/0x4f [ 456.145104] kasan_report.cold+0xa9/0x2ba [ 456.149333] check_memory_region+0x123/0x190 [ 456.153928] memset+0x24/0x40 [ 456.157059] kvm_write_guest_virt_system+0x64/0x90 [ 456.162011] handle_vmread+0x7fe/0xa10 [ 456.165919] ? handle_invpcid+0xa80/0xa80 [ 456.170092] ? __lock_is_held+0xb6/0x140 [ 456.174179] ? __lock_is_held+0xb6/0x140 [ 456.178256] ? handle_invpcid+0xa80/0xa80 [ 456.182420] vmx_handle_exit+0x276/0x16b0 [ 456.186578] ? lock_acquire+0x16f/0x3f0 [ 456.190559] ? vcpu_enter_guest+0xf15/0x5ed0 [ 456.194987] vcpu_enter_guest+0x10ca/0x5ed0 [ 456.199318] ? kvm_vcpu_ioctl+0x181/0xf90 [ 456.203474] ? emulator_read_emulated+0x50/0x50 02:23:33 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') open(&(0x7f0000000080)='./file1\x00', 0x40140, 0x7c) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) [ 456.208320] ? lock_acquire+0x16f/0x3f0 [ 456.212303] ? kvm_check_async_pf_completion+0x2d8/0x440 [ 456.217770] kvm_arch_vcpu_ioctl_run+0x457/0x16b0 [ 456.222639] ? kvm_arch_vcpu_ioctl_run+0x457/0x16b0 [ 456.227671] kvm_vcpu_ioctl+0x4dc/0xf90 [ 456.231658] ? kvm_vcpu_block+0xcc0/0xcc0 [ 456.235817] ? mark_held_locks+0x100/0x100 [ 456.240077] ? __might_fault+0x12b/0x1e0 [ 456.244152] ? __fget+0x340/0x540 [ 456.247619] ? find_held_lock+0x35/0x130 [ 456.251692] ? __fget+0x340/0x540 [ 456.255158] ? kvm_vcpu_block+0xcc0/0xcc0 [ 456.259320] do_vfs_ioctl+0xd5f/0x1380 [ 456.263303] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.268853] ? selinux_file_ioctl+0x125/0x5e0 [ 456.273364] ? ioctl_preallocate+0x210/0x210 [ 456.277790] ? selinux_file_mprotect+0x620/0x620 [ 456.282567] ? iterate_fd+0x360/0x360 [ 456.286384] ? nsecs_to_jiffies+0x30/0x30 [ 456.290545] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.296091] ? security_file_ioctl+0x8d/0xc0 [ 456.300517] ksys_ioctl+0xab/0xd0 [ 456.303995] __x64_sys_ioctl+0x73/0xb0 [ 456.307899] do_syscall_64+0xfd/0x620 [ 456.311841] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 456.317048] RIP: 0033:0x459a29 [ 456.320254] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 456.339167] RSP: 002b:00007fe91fa46c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 456.346899] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a29 [ 456.354266] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 456.361536] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 456.368968] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe91fa476d4 [ 456.376231] R13: 00000000004c2ddb R14: 00000000004d6618 R15: 00000000ffffffff [ 456.385574] Kernel Offset: disabled [ 456.389214] Rebooting in 86400 seconds..