0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000004c0), 0x4) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) 05:38:13 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:13 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 05:38:13 executing program 0: openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrlimit(0x7, &(0x7f0000000400)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000004c0), 0x4) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) 05:38:13 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xd1, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:13 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:13 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 05:38:13 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 05:38:13 executing program 0: openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrlimit(0x7, &(0x7f0000000400)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000004c0), 0x4) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) 05:38:14 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:14 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 05:38:14 executing program 0: openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrlimit(0x7, &(0x7f0000000400)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000004c0), 0x4) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) 05:38:14 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xd2, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:14 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffff9c, 0x0) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xfffffdef) 05:38:14 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 05:38:14 executing program 4: openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrlimit(0x0, &(0x7f0000000400)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000004c0)=0x7, 0x4) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) 05:38:14 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) [ 392.024124][ C1] net_ratelimit: 22 callbacks suppressed [ 392.024132][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 392.035726][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:38:14 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(r1, 0x0, 0x0) 05:38:14 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:14 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 05:38:14 executing program 0: openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrlimit(0x7, &(0x7f0000000400)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000004c0), 0x4) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) 05:38:14 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:14 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 05:38:14 executing program 4 (fault-call:2 fault-nth:0): socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:14 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xd4, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:14 executing program 0: openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrlimit(0x7, &(0x7f0000000400)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000004c0), 0x4) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) 05:38:15 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 05:38:15 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:15 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) [ 392.824118][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 392.830148][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:38:15 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(r1, 0x0, 0x0) 05:38:15 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x1f00, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:15 executing program 0: openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrlimit(0x7, &(0x7f0000000400)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000004c0), 0x4) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) 05:38:15 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) [ 392.984113][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 392.989970][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 393.144175][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 393.150105][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 393.224112][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 393.229931][ C0] protocol 88fb is buggy, dev hsr_slave_1 05:38:15 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:15 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x4, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:15 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 05:38:15 executing program 0: openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrlimit(0x7, &(0x7f0000000400)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000004c0), 0x4) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) 05:38:15 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x2000, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:15 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:15 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 05:38:16 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x8, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:16 executing program 0: openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrlimit(0x7, &(0x7f0000000400)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000004c0), 0x4) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) 05:38:16 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(r1, 0x0, 0x0) 05:38:16 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:16 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x1000000, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:16 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 05:38:16 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x9, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:16 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:16 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 05:38:16 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x900, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:16 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x1f000000, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:16 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:16 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 05:38:16 executing program 0: openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrlimit(0x7, &(0x7f0000000400)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000004c0), 0x4) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) 05:38:17 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x3f00, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:17 executing program 0: openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrlimit(0x7, &(0x7f0000000400)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000004c0), 0x4) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) 05:38:17 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:17 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x20000000, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:17 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 05:38:17 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000040)={0x60, 0x0, 0x8}, 0x60) 05:38:17 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") 05:38:17 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 05:38:17 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x40000, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:17 executing program 0: openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrlimit(0x7, &(0x7f0000000400)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000004c0), 0x4) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) 05:38:17 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:17 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0xa4ffffff, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:17 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 05:38:17 executing program 3: socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:17 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x1000000, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:17 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0xffffffa4, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:17 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 05:38:17 executing program 0: openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrlimit(0x7, &(0x7f0000000400)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000004c0), 0x4) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) 05:38:18 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(0x0, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, &(0x7f00000ddff8), 0x102000002) 05:38:18 executing program 3: socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:18 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x8000000, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:18 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x100000000000000, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:18 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 05:38:18 executing program 0: openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrlimit(0x7, &(0x7f0000000400)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000004c0), 0x4) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) 05:38:18 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 05:38:18 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x9000000, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:18 executing program 3: socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:18 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x10) 05:38:18 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x1f00000000000000, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:18 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 05:38:18 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000900)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2f, 0x0, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) 05:38:18 executing program 0: openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrlimit(0x7, &(0x7f0000000400)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000004c0), 0x4) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) 05:38:18 executing program 3: socketpair(0x1, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:18 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x3f000000, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:18 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 05:38:18 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000900)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2f, 0x0, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) 05:38:18 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x2000000000000000, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:18 executing program 3: socketpair(0x1, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:19 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000900)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2f, 0x0, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) 05:38:19 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x4000000000000, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:19 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 05:38:19 executing program 3: socketpair(0x1, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:19 executing program 0: openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrlimit(0x7, &(0x7f0000000400)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000004c0), 0x4) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) 05:38:19 executing program 3: socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:19 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0xa4ffffff00000000, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:19 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000900)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2f, 0x0, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) 05:38:19 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x100000000000000, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:19 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 05:38:19 executing program 3: socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:19 executing program 0: openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrlimit(0x7, &(0x7f0000000400)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000004c0), 0x4) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) [ 397.144108][ C1] net_ratelimit: 18 callbacks suppressed [ 397.144117][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 397.156122][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:38:19 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000900)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2f, 0x0, 0x0, 0x0) 05:38:19 executing program 3: socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:19 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x800000000000000, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:19 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x1f00, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) [ 397.304103][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 397.309948][ C0] protocol 88fb is buggy, dev hsr_slave_1 05:38:19 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000900)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2f, 0x0, 0x0, 0x0) 05:38:19 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) [ 397.384107][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 397.390038][ C0] protocol 88fb is buggy, dev hsr_slave_1 05:38:19 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) [ 397.464201][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 397.470022][ C0] protocol 88fb is buggy, dev hsr_slave_1 05:38:19 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000900)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2f, 0x0, 0x0, 0x0) 05:38:19 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x900000000000000, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:19 executing program 0: openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrlimit(0x7, &(0x7f0000000400)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000004c0), 0x4) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) 05:38:19 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) 05:38:20 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000900)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2f, 0x0, 0x0, 0x0) 05:38:20 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:20 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x2000, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:20 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2f, 0x0, 0x0, 0x0) 05:38:20 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x3f00000000000000, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:20 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) 05:38:20 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2f, 0x0, 0x0, 0x0) 05:38:20 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:20 executing program 0: openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrlimit(0x7, &(0x7f0000000400)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000004c0), 0x4) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) 05:38:20 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x1000000, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:20 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:20 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) 05:38:20 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2f, 0x0, 0x0, 0x0) 05:38:20 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) [ 398.264136][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 398.269949][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:38:20 executing program 0: openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrlimit(0x7, &(0x7f0000000400)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000004c0), 0x4) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) 05:38:20 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) 05:38:20 executing program 1: connect$inet(0xffffffffffffffff, &(0x7f0000000900)={0x2, 0x0, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0x0, 0x0) 05:38:20 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:20 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:20 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x1f000000, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:20 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 05:38:20 executing program 1: connect$inet(0xffffffffffffffff, &(0x7f0000000900)={0x2, 0x0, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0x0, 0x0) 05:38:21 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:21 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:21 executing program 1: connect$inet(0xffffffffffffffff, &(0x7f0000000900)={0x2, 0x0, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0x0, 0x0) 05:38:21 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x20000000, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:21 executing program 0: openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrlimit(0x7, &(0x7f0000000400)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000004c0), 0x4) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x0) 05:38:21 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 05:38:21 executing program 1: r0 = socket(0x0, 0x5, 0x0) connect$inet(r0, &(0x7f0000000900)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2f, 0x0, 0x0, 0x0) 05:38:21 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:21 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:21 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0xa4ffffff, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:21 executing program 1: r0 = socket(0x0, 0x5, 0x0) connect$inet(r0, &(0x7f0000000900)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2f, 0x0, 0x0, 0x0) 05:38:21 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 05:38:21 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:21 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:21 executing program 1: r0 = socket(0x0, 0x5, 0x0) connect$inet(r0, &(0x7f0000000900)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2f, 0x0, 0x0, 0x0) 05:38:21 executing program 0: openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrlimit(0x7, &(0x7f0000000400)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000004c0), 0x4) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x0) 05:38:21 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0xffffffa4, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$inet6_dccp(0xa, 0x6, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'ip6_vti0\x00', 0x2000}) r3 = socket$inet6(0xa, 0xf, 0x20) ioctl(r1, 0x8910, &(0x7f0000000200)="d6") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\'', 0x1ff) r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000640)={0x2, 0x0, @multicast2}, &(0x7f0000000980)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e20, 0x3, @remote, 0x40}}, 0x0, 0x8, 0x169, 0x3}, &(0x7f0000000b00)=0x98) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000001c40), 0x4) syz_genetlink_get_family_id$fou(&(0x7f00000009c0)='fou\x00') pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f00000000c0)) recvmsg$kcm(r6, &(0x7f0000000340)={&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000000680)=""/200, 0xbb}, {&(0x7f0000000580)=""/183, 0xb7}, {&(0x7f0000000800)=""/190, 0xbe}, {&(0x7f0000000b80)=""/143, 0x8f}, {&(0x7f0000000c40)=""/4096, 0x1000}], 0x5}, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r6, 0x28, 0x6, &(0x7f0000000380), 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x7, 0x8, 0x40003}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000780)={0x0, 'dummy0\x00'}, 0x18) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f00000008c0)={{0x67, @dev={0xac, 0x14, 0x14, 0x1e}, 0x4e21, 0x0, 'wrr\x00', 0x6, 0x4, 0x2}, {@loopback, 0x4e22, 0x2000, 0x7, 0xde, 0x80000001}}, 0x44) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgr//syz0\x00\x00\x00\x00\x00\x00\x00', 0x200002, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20000002}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001d80)='./cgroup.net/syz1\x00KU[w\xc2\xa0u\xcd\xed\x90\xf5(<\xd9\xfb\x01\xf4\x05\xf2\xaf{K<\x82\xc4\x17w\xee-\x1c\xde\xce\x0f\xa6\x9a\xbeL\xab\xba\x98\xa8\x92\xca\xae\x9a(\xb5R9\x8f\xed\xcf\x8e\xaa\xf1\x1a\xab\x94+\xd0\x0e\xf3R\x0e\xe2\xe2\xde@\'\x04\xa3\'H\x8b\xa3\x06,cds\xc9\x82\xa8\xe7\x03\xd9\x9b\x81\xdb\xda\x87\xa9\x04\xaa\xbf!\x8e\xc9\x9c\v\xb2\xd9\xb7\xffL\xe09\x85\x1f\x8e\xce\xe6v\x0fkT\xe2\xe4\xe9\xfc\xaf]\x84Z@*9\x94\x97;\xea\xda\xe4\x02\x90{\x8cQ8ViU\x90\x17\xd6Ifi\x89d\x88\x13\xcfaw\xa2\xab\x00\xc0j\xa0\xc1iT\xe3\xe7\xfct\x12\xb4\x1b\x109\xa1\x86{+\x9fJ`?Q\xa2\x86\x93\x02}P\xec\xa7}]\xd5e\x83\xd2k\b\xf8\xa3\n\x13<\xaf\xae\xb3D\x12U)\xb9cw&\x81', 0x1ff) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f0000000080)}, 0x10) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000000)={0x8, 0x5, 0x7, 0x7ff, 0x7}) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000940)) read(r7, &(0x7f0000000640), 0x0) accept(r3, &(0x7f0000000480)=@sco, &(0x7f0000000500)=0x2f2) 05:38:21 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:21 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:21 executing program 1: r0 = socket(0x40000000015, 0x0, 0x0) connect$inet(r0, &(0x7f0000000900)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2f, 0x0, 0x0, 0x0) 05:38:21 executing program 0: openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrlimit(0x7, &(0x7f0000000400)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000004c0), 0x4) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x0) 05:38:22 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:22 executing program 1: r0 = socket(0x40000000015, 0x0, 0x0) connect$inet(r0, &(0x7f0000000900)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2f, 0x0, 0x0, 0x0) 05:38:22 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:22 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x8, 0x4, @tid=r0}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1}, {0x0, 0x989680}}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0xfffff7fffffffdaf}, 0x8, 0x0) read(r1, &(0x7f0000000400)=""/128, 0xffffffb2) 05:38:22 executing program 1: r0 = socket(0x40000000015, 0x0, 0x0) connect$inet(r0, &(0x7f0000000900)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2f, 0x0, 0x0, 0x0) 05:38:22 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:22 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x100000000000000, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:22 executing program 2: 05:38:22 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:22 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000900)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2f, 0x0, 0x0, 0x0) 05:38:22 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:22 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000900)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2f, 0x0, 0x0, 0x0) 05:38:22 executing program 2: 05:38:22 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:22 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(r0, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:23 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x1f00000000000000, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:23 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000900)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2f, 0x0, 0x0, 0x0) 05:38:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) connect$inet6(r0, &(0x7f0000000340), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) read(0xffffffffffffffff, 0x0, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000140), 0x10) r2 = getpid() rt_sigqueueinfo(r2, 0x31, &(0x7f0000000080)) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="2265162d6c36d2d553b535288f726cee2343cd3da80438bbe33926e61647fc7fcab63c030ef325ad0f899dcc3d1baefa9b3b5a978b1e8319bcc3c41f139590cb2be0b46092dbd2174e400b05", 0x4c}], 0x1, 0x0) 05:38:23 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(r0, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:23 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:23 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2f, 0x0, 0x0, 0x0) 05:38:23 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(r0, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:23 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:23 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x2000000000000000, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:23 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:23 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2f, 0x0, 0x0, 0x0) 05:38:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:23 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2f, 0x0, 0x0, 0x0) 05:38:23 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:23 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:23 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0xa4ffffff00000000, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:23 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000900)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) 05:38:23 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000900)={0x2, 0x0, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2f, 0x0, 0x0, 0x0) 05:38:23 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:23 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:24 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:24 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x1f00]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:24 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000900)={0x2, 0x0, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2f, 0x0, 0x0, 0x0) 05:38:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:24 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:24 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:24 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000900)={0x2, 0x0, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x2f, 0x0, 0x0, 0x0) 05:38:24 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x2000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:24 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:24 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000900)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x2f, 0x0, 0x0, 0x0) 05:38:24 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:24 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x1000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:24 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000900)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x2f, 0x0, 0x0, 0x0) 05:38:24 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) [ 402.424152][ C1] net_ratelimit: 22 callbacks suppressed [ 402.424162][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 402.435701][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:38:24 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:25 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000900)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x2f, 0x0, 0x0, 0x0) 05:38:25 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x4}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:25 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x1f000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:25 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:25 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:25 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000900)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0x0, 0x0) 05:38:25 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x8}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:25 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x20000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:25 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000900)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0x0, 0x0) 05:38:25 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x9}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:25 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) [ 403.224164][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 403.229995][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 403.384122][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 403.389997][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:38:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:25 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0xa4ffffff]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:25 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000900)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0x0, 0x0) 05:38:25 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x900}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) [ 403.544154][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 403.550001][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 403.624109][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 403.629928][ C0] protocol 88fb is buggy, dev hsr_slave_1 05:38:26 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:26 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:26 executing program 1: 05:38:26 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3f00}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:26 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:26 executing program 1: 05:38:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:26 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:26 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x100000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:26 executing program 1: 05:38:26 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:26 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x80000040045010, &(0x7f0000000040)) 05:38:26 executing program 1: 05:38:26 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x1f00000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:26 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:26 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1000000}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:27 executing program 1: 05:38:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x80000040045010, &(0x7f0000000040)) 05:38:27 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x8000000}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:27 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:27 executing program 1: 05:38:27 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x9000000}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:27 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(r1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:27 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:27 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x2000000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x80000040045010, &(0x7f0000000040)) 05:38:27 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3f000000}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:27 executing program 1: 05:38:27 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:27 executing program 1: 05:38:27 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)) 05:38:27 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x4000000000000}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:28 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:28 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0xa4ffffff00000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:28 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(r1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:28 executing program 1: 05:38:28 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x100000000000000}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:28 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:28 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x1f00]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:28 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)) 05:38:28 executing program 1: 05:38:28 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:28 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x800000000000000}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:28 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x2000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:28 executing program 1: 05:38:28 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:29 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(r1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:29 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x900000000000000}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:29 executing program 1: 05:38:29 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x1000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:29 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:29 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)) 05:38:29 executing program 1: 05:38:29 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3f00000000000000}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:29 executing program 2: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:29 executing program 1: 05:38:29 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:29 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) [ 407.544151][ C1] net_ratelimit: 18 callbacks suppressed [ 407.544160][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 407.555773][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 407.714135][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 407.720007][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 407.794144][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 407.799976][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 407.864169][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 407.870000][ C0] protocol 88fb is buggy, dev hsr_slave_1 05:38:30 executing program 1: 05:38:30 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x1f000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:30 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:30 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:30 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)) 05:38:30 executing program 3: 05:38:30 executing program 1: 05:38:30 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:30 executing program 3: 05:38:30 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:30 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x20000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:30 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) 05:38:30 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:30 executing program 3: r0 = eventfd(0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) keyctl$session_to_parent(0x12) write$P9_RSTAT(r0, &(0x7f0000001a40)={0x58, 0x7d, 0x0, {0x0, 0x51, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xc, '+^eth0system', 0x7, 'keyring', 0xa, '/dev/full\x00', 0x1, '.'}}, 0x58) 05:38:30 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:30 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0xa4ffffff]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) [ 408.664110][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 408.669960][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:38:31 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)) 05:38:31 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:31 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) 05:38:31 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600000000006c2e0000000000030003006f36000000000000380000000000003c9afb0000200020"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:38:31 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:31 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:31 executing program 3: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x16, 0x0, 0x0) 05:38:31 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x11}]}, 0x30}}, 0x0) 05:38:31 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:31 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:31 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x100000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) [ 409.056764][T21317] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 409.113870][T21317] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:38:31 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)) 05:38:31 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:31 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x1f00000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x11}]}, 0x30}}, 0x0) 05:38:31 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:31 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) [ 409.555170][T21337] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 409.589811][T21337] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:38:32 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x2000000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:32 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x11}]}, 0x30}}, 0x0) 05:38:32 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:32 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0xa4ffffff00000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:32 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) [ 409.892678][T21357] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 409.968133][T21357] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:38:32 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)) 05:38:32 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:32 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:32 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x1f00]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:32 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:32 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x11}]}, 0x30}}, 0x0) 05:38:32 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:32 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x2000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) [ 410.362601][T21389] netlink: 'syz-executor.1': attribute type 17 has an invalid length. 05:38:32 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) [ 410.418636][T21389] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:38:32 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:32 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:33 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)) 05:38:33 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x1000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:33 executing program 1: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x2000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:33 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:33 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:33 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:38:33 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:33 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:38:33 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:33 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)) 05:38:33 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:33 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x1f000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:33 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:33 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:33 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:38:33 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)) 05:38:33 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x20000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:33 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:33 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x0, 0xffffffffffffffff}) 05:38:33 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:33 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0xa4ffffff]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:33 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)) 05:38:33 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:34 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x0, 0xffffffffffffffff}) 05:38:34 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:34 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:34 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:34 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x0, 0xffffffffffffffff}) 05:38:34 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:34 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:34 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x100000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:34 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:34 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)) 05:38:34 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009}) 05:38:34 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:34 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x1f00000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:34 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009}) 05:38:34 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:35 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:35 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x2000000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:35 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009}) 05:38:35 executing program 3: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:35 executing program 2: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) [ 412.824128][ C1] net_ratelimit: 22 callbacks suppressed [ 412.824137][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 412.835773][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:38:35 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) 05:38:35 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:35 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:35 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0xa4ffffff00000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:35 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)) 05:38:35 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:35 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:35 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x1f00]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:35 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:35 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x2000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:35 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:35 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) [ 413.624113][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 413.629971][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:38:36 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x1000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:36 executing program 2: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x1f00]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:36 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:36 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) [ 413.784156][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 413.789977][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:38:36 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x1f000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) [ 413.944173][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 413.950274][ C0] protocol 88fb is buggy, dev hsr_slave_1 05:38:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:36 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:36 executing program 2: openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrlimit(0x7, &(0x7f0000000400)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000004c0), 0x4) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x0) 05:38:36 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) [ 414.024116][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 414.030006][ C0] protocol 88fb is buggy, dev hsr_slave_1 05:38:36 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x20000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:36 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:36 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) 05:38:36 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:36 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xa4ffffff]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:36 executing program 2: openat$pfkey(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrlimit(0x7, &(0x7f0000000400)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000004c0), 0x4) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) 05:38:36 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:36 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:37 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:37 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:37 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) 05:38:37 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:37 executing program 2 (fault-call:2 fault-nth:0): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:37 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x80000040045010, &(0x7f0000000040)) 05:38:37 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:37 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) [ 414.906036][T21712] FAULT_INJECTION: forcing a failure. [ 414.906036][T21712] name failslab, interval 1, probability 0, space 0, times 0 [ 414.974500][T21712] CPU: 1 PID: 21712 Comm: syz-executor.2 Not tainted 5.1.0-rc1+ #29 [ 414.982522][T21712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 414.992584][T21712] Call Trace: [ 414.992630][T21712] dump_stack+0x172/0x1f0 [ 414.992654][T21712] should_fail.cold+0xa/0x15 [ 414.992675][T21712] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 414.992698][T21712] ? ___might_sleep+0x163/0x280 [ 414.992722][T21712] __should_failslab+0x121/0x190 [ 415.020489][T21712] should_failslab+0x9/0x14 [ 415.025009][T21712] kmem_cache_alloc_trace+0x2d1/0x760 [ 415.030407][T21712] ion_ioctl+0x2f6/0xf70 [ 415.034662][T21712] ? lock_downgrade+0x880/0x880 [ 415.039532][T21712] ? _ion_buffer_destroy+0x110/0x110 [ 415.044840][T21712] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 415.050669][T21712] ? __fget+0x35a/0x550 [ 415.055022][T21712] ? _ion_buffer_destroy+0x110/0x110 [ 415.060329][T21712] do_vfs_ioctl+0xd6e/0x1390 [ 415.064935][T21712] ? ioctl_preallocate+0x210/0x210 [ 415.070058][T21712] ? __fget+0x381/0x550 [ 415.074230][T21712] ? ksys_dup3+0x3e0/0x3e0 [ 415.078663][T21712] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 415.084919][T21712] ? fput_many+0x12c/0x1a0 [ 415.089359][T21712] ? tomoyo_file_ioctl+0x23/0x30 [ 415.094304][T21712] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 415.100568][T21712] ? security_file_ioctl+0x93/0xc0 [ 415.105689][T21712] ksys_ioctl+0xab/0xd0 [ 415.109850][T21712] __x64_sys_ioctl+0x73/0xb0 [ 415.114451][T21712] do_syscall_64+0x103/0x610 [ 415.119051][T21712] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 415.124945][T21712] RIP: 0033:0x458079 [ 415.128841][T21712] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 415.148456][T21712] RSP: 002b:00007f51a8ff4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 415.156873][T21712] RAX: ffffffffffffffda RBX: 00007f51a8ff4c90 RCX: 0000000000458079 [ 415.164852][T21712] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 05:38:37 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x100000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:37 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x80000040045010, &(0x7f0000000040)) [ 415.172825][T21712] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 415.180831][T21712] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f51a8ff56d4 [ 415.188810][T21712] R13: 00000000004c082b R14: 00000000004d25a0 R15: 0000000000000005 05:38:37 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:38:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:37 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x80000040045010, &(0x7f0000000040)) 05:38:37 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:37 executing program 2 (fault-call:2 fault-nth:1): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:37 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:38:37 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:38:37 executing program 1: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)) [ 415.506108][T21741] FAULT_INJECTION: forcing a failure. [ 415.506108][T21741] name failslab, interval 1, probability 0, space 0, times 0 [ 415.572080][T21741] CPU: 1 PID: 21741 Comm: syz-executor.2 Not tainted 5.1.0-rc1+ #29 [ 415.580114][T21741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 415.590170][T21741] Call Trace: [ 415.590198][T21741] dump_stack+0x172/0x1f0 [ 415.590227][T21741] should_fail.cold+0xa/0x15 [ 415.602431][T21741] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 415.608264][T21741] ? ___might_sleep+0x163/0x280 [ 415.613159][T21741] __should_failslab+0x121/0x190 [ 415.618107][T21741] should_failslab+0x9/0x14 [ 415.622615][T21741] kmem_cache_alloc_trace+0x2d1/0x760 [ 415.622633][T21741] ? trace_hardirqs_on+0x67/0x230 [ 415.622656][T21741] ? ion_ioctl+0xa3c/0xf70 [ 415.637443][T21741] ion_ioctl+0x2f6/0xf70 [ 415.641695][T21741] ? lock_downgrade+0x880/0x880 [ 415.646583][T21741] ? _ion_buffer_destroy+0x110/0x110 [ 415.651893][T21741] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 415.657730][T21741] ? __fget+0x35a/0x550 [ 415.657756][T21741] ? _ion_buffer_destroy+0x110/0x110 [ 415.657775][T21741] do_vfs_ioctl+0xd6e/0x1390 [ 415.657796][T21741] ? ioctl_preallocate+0x210/0x210 [ 415.671793][T21741] ? __fget+0x381/0x550 [ 415.671817][T21741] ? ksys_dup3+0x3e0/0x3e0 [ 415.671833][T21741] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 415.671853][T21741] ? fput_many+0x12c/0x1a0 [ 415.696135][T21741] ? tomoyo_file_ioctl+0x23/0x30 [ 415.701085][T21741] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 415.707340][T21741] ? security_file_ioctl+0x93/0xc0 [ 415.712469][T21741] ksys_ioctl+0xab/0xd0 [ 415.716644][T21741] __x64_sys_ioctl+0x73/0xb0 [ 415.721261][T21741] do_syscall_64+0x103/0x610 [ 415.725878][T21741] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 415.731779][T21741] RIP: 0033:0x458079 [ 415.735675][T21741] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 415.755273][T21741] RSP: 002b:00007f51a8ff4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 415.763682][T21741] RAX: ffffffffffffffda RBX: 00007f51a8ff4c90 RCX: 0000000000458079 05:38:37 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x1f00000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:37 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) [ 415.771662][T21741] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 415.779626][T21741] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 415.787592][T21741] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f51a8ff56d4 [ 415.795556][T21741] R13: 00000000004c082b R14: 00000000004d25a0 R15: 0000000000000005 05:38:38 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:38 executing program 2 (fault-call:2 fault-nth:2): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:38 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x0, 0xffffffffffffffff}) [ 415.966026][T21773] FAULT_INJECTION: forcing a failure. [ 415.966026][T21773] name failslab, interval 1, probability 0, space 0, times 0 [ 416.002140][T21773] CPU: 1 PID: 21773 Comm: syz-executor.2 Not tainted 5.1.0-rc1+ #29 [ 416.010262][T21773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 416.020352][T21773] Call Trace: [ 416.023662][T21773] dump_stack+0x172/0x1f0 [ 416.028002][T21773] should_fail.cold+0xa/0x15 [ 416.032594][T21773] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 416.038403][T21773] ? ___might_sleep+0x163/0x280 [ 416.043257][T21773] __should_failslab+0x121/0x190 [ 416.048204][T21773] should_failslab+0x9/0x14 [ 416.052740][T21773] kmem_cache_alloc_trace+0x2d1/0x760 [ 416.058125][T21773] ion_system_heap_allocate+0x40d/0xaa0 [ 416.063681][T21773] ? ion_system_heap_free+0x250/0x250 [ 416.069053][T21773] ? ion_ioctl+0xa3c/0xf70 [ 416.073485][T21773] ion_ioctl+0x3d8/0xf70 [ 416.077727][T21773] ? lock_downgrade+0x880/0x880 [ 416.082688][T21773] ? _ion_buffer_destroy+0x110/0x110 [ 416.087975][T21773] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 416.093790][T21773] ? __fget+0x35a/0x550 [ 416.097950][T21773] ? _ion_buffer_destroy+0x110/0x110 [ 416.103234][T21773] do_vfs_ioctl+0xd6e/0x1390 [ 416.107838][T21773] ? ioctl_preallocate+0x210/0x210 [ 416.112953][T21773] ? __fget+0x381/0x550 [ 416.117111][T21773] ? ksys_dup3+0x3e0/0x3e0 [ 416.121554][T21773] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 416.127790][T21773] ? fput_many+0x12c/0x1a0 [ 416.132257][T21773] ? tomoyo_file_ioctl+0x23/0x30 [ 416.137225][T21773] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 416.143461][T21773] ? security_file_ioctl+0x93/0xc0 [ 416.148574][T21773] ksys_ioctl+0xab/0xd0 [ 416.152732][T21773] __x64_sys_ioctl+0x73/0xb0 [ 416.157331][T21773] do_syscall_64+0x103/0x610 [ 416.161936][T21773] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 416.167825][T21773] RIP: 0033:0x458079 [ 416.171715][T21773] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 416.191354][T21773] RSP: 002b:00007f51a8ff4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 416.199793][T21773] RAX: ffffffffffffffda RBX: 00007f51a8ff4c90 RCX: 0000000000458079 [ 416.207760][T21773] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 05:38:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) [ 416.215725][T21773] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 416.223692][T21773] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f51a8ff56d4 [ 416.231660][T21773] R13: 00000000004c082b R14: 00000000004d25a0 R15: 0000000000000005 05:38:38 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:38 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x2000000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:38 executing program 1: r0 = syz_open_dev$dspn(0x0, 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)) 05:38:38 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x0, 0xffffffffffffffff}) 05:38:38 executing program 1: r0 = syz_open_dev$dspn(0x0, 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)) 05:38:38 executing program 1: r0 = syz_open_dev$dspn(0x0, 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)) 05:38:38 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0xa4ffffff00000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:38 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:38 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x0, 0xffffffffffffffff}) 05:38:39 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:39 executing program 1: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)) 05:38:39 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009}) 05:38:39 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:39 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x1f00]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:39 executing program 1: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)) 05:38:39 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009}) 05:38:39 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:39 executing program 1: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)) 05:38:39 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x2, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:39 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009}) 05:38:39 executing program 1: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)) 05:38:39 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x5421, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:39 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x2000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:39 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:39 executing program 3 (fault-call:2 fault-nth:0): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:39 executing program 1: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)) 05:38:39 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x5450, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:40 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x1000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:40 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:40 executing program 1: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)) [ 417.755180][T21887] FAULT_INJECTION: forcing a failure. [ 417.755180][T21887] name failslab, interval 1, probability 0, space 0, times 0 [ 417.820947][T21887] CPU: 1 PID: 21887 Comm: syz-executor.3 Not tainted 5.1.0-rc1+ #29 [ 417.828971][T21887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 417.839050][T21887] Call Trace: [ 417.842455][T21887] dump_stack+0x172/0x1f0 [ 417.846806][T21887] should_fail.cold+0xa/0x15 [ 417.851426][T21887] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 417.857251][T21887] ? ___might_sleep+0x163/0x280 [ 417.862216][T21887] __should_failslab+0x121/0x190 [ 417.867194][T21887] should_failslab+0x9/0x14 [ 417.871716][T21887] kmem_cache_alloc_trace+0x2d1/0x760 [ 417.877114][T21887] ion_ioctl+0x2f6/0xf70 [ 417.881360][T21887] ? lock_downgrade+0x880/0x880 [ 417.886226][T21887] ? _ion_buffer_destroy+0x110/0x110 [ 417.891532][T21887] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 417.897356][T21887] ? __fget+0x35a/0x550 [ 417.901520][T21887] ? _ion_buffer_destroy+0x110/0x110 [ 417.906947][T21887] do_vfs_ioctl+0xd6e/0x1390 [ 417.911553][T21887] ? ioctl_preallocate+0x210/0x210 [ 417.916670][T21887] ? __fget+0x381/0x550 [ 417.920834][T21887] ? ksys_dup3+0x3e0/0x3e0 [ 417.925249][T21887] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 417.931486][T21887] ? fput_many+0x12c/0x1a0 [ 417.935946][T21887] ? tomoyo_file_ioctl+0x23/0x30 [ 417.940892][T21887] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 417.947136][T21887] ? security_file_ioctl+0x93/0xc0 [ 417.952249][T21887] ksys_ioctl+0xab/0xd0 [ 417.956411][T21887] __x64_sys_ioctl+0x73/0xb0 [ 417.961008][T21887] do_syscall_64+0x103/0x610 [ 417.965606][T21887] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 417.971492][T21887] RIP: 0033:0x458079 [ 417.975389][T21887] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 417.994988][T21887] RSP: 002b:00007fb53930ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.003396][T21887] RAX: ffffffffffffffda RBX: 00007fb53930ac90 RCX: 0000000000458079 [ 418.011366][T21887] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 418.019338][T21887] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 418.027305][T21887] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb53930b6d4 [ 418.035367][T21887] R13: 00000000004c082b R14: 00000000004d25a0 R15: 0000000000000005 [ 418.043714][ C1] net_ratelimit: 16 callbacks suppressed [ 418.043723][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 418.055257][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 418.061107][ C1] protocol 88fb is buggy, dev hsr_slave_0 05:38:40 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x5451, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) [ 418.066920][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:38:40 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x5452, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:40 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:40 executing program 1: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, 0x0, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)) 05:38:40 executing program 3 (fault-call:2 fault-nth:1): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:40 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x5460, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:40 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x1f000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) [ 418.264136][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 418.269953][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 418.275840][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 418.281608][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 418.287461][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 418.293232][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 418.371173][T21925] FAULT_INJECTION: forcing a failure. [ 418.371173][T21925] name failslab, interval 1, probability 0, space 0, times 0 [ 418.403665][T21925] CPU: 1 PID: 21925 Comm: syz-executor.3 Not tainted 5.1.0-rc1+ #29 05:38:40 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) [ 418.411691][T21925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 418.421756][T21925] Call Trace: [ 418.425084][T21925] dump_stack+0x172/0x1f0 [ 418.429466][T21925] should_fail.cold+0xa/0x15 [ 418.434090][T21925] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 418.439930][T21925] ? ___might_sleep+0x163/0x280 [ 418.444804][T21925] __should_failslab+0x121/0x190 [ 418.449772][T21925] should_failslab+0x9/0x14 [ 418.454295][T21925] kmem_cache_alloc_trace+0x2d1/0x760 [ 418.459695][T21925] ? trace_hardirqs_on+0x67/0x230 [ 418.464743][T21925] ? ion_ioctl+0xa3c/0xf70 [ 418.469193][T21925] ion_ioctl+0x2f6/0xf70 [ 418.473464][T21925] ? lock_downgrade+0x880/0x880 [ 418.480223][T21925] ? _ion_buffer_destroy+0x110/0x110 [ 418.485546][T21925] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 418.491382][T21925] ? __fget+0x35a/0x550 [ 418.495564][T21925] ? _ion_buffer_destroy+0x110/0x110 [ 418.500857][T21925] do_vfs_ioctl+0xd6e/0x1390 [ 418.506004][T21925] ? ioctl_preallocate+0x210/0x210 [ 418.511118][T21925] ? __fget+0x381/0x550 [ 418.515278][T21925] ? ksys_dup3+0x3e0/0x3e0 [ 418.519691][T21925] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 418.525928][T21925] ? fput_many+0x12c/0x1a0 [ 418.530350][T21925] ? tomoyo_file_ioctl+0x23/0x30 [ 418.535305][T21925] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 418.541565][T21925] ? security_file_ioctl+0x93/0xc0 [ 418.546682][T21925] ksys_ioctl+0xab/0xd0 [ 418.550841][T21925] __x64_sys_ioctl+0x73/0xb0 [ 418.555437][T21925] do_syscall_64+0x103/0x610 [ 418.560031][T21925] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 418.565920][T21925] RIP: 0033:0x458079 [ 418.569817][T21925] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 418.589445][T21925] RSP: 002b:00007fb53930ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.597882][T21925] RAX: ffffffffffffffda RBX: 00007fb53930ac90 RCX: 0000000000458079 [ 418.606047][T21925] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 418.614023][T21925] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 05:38:40 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x40049409, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:41 executing program 1: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, 0x0, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)) [ 418.621998][T21925] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb53930b6d4 [ 418.629969][T21925] R13: 00000000004c082b R14: 00000000004d25a0 R15: 0000000000000005 05:38:41 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:41 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x20000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:41 executing program 1: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, 0x0, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)) 05:38:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:41 executing program 3 (fault-call:2 fault-nth:2): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:41 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x4020940d, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:41 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:41 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:41 executing program 1: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480), 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)) [ 419.014534][T21960] FAULT_INJECTION: forcing a failure. [ 419.014534][T21960] name failslab, interval 1, probability 0, space 0, times 0 [ 419.080297][T21960] CPU: 0 PID: 21960 Comm: syz-executor.3 Not tainted 5.1.0-rc1+ #29 [ 419.088357][T21960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 419.099145][T21960] Call Trace: [ 419.102467][T21960] dump_stack+0x172/0x1f0 [ 419.106845][T21960] should_fail.cold+0xa/0x15 [ 419.111467][T21960] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 419.117395][T21960] ? ___might_sleep+0x163/0x280 [ 419.122271][T21960] __should_failslab+0x121/0x190 [ 419.127225][T21960] should_failslab+0x9/0x14 [ 419.131745][T21960] kmem_cache_alloc_trace+0x2d1/0x760 [ 419.137240][T21960] ion_system_heap_allocate+0x40d/0xaa0 [ 419.142813][T21960] ? ion_system_heap_free+0x250/0x250 [ 419.148208][T21960] ? ion_ioctl+0xa3c/0xf70 [ 419.152738][T21960] ion_ioctl+0x3d8/0xf70 [ 419.157019][T21960] ? _ion_buffer_destroy+0x110/0x110 [ 419.162323][T21960] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 419.168162][T21960] ? __fget+0x35a/0x550 [ 419.172339][T21960] ? _ion_buffer_destroy+0x110/0x110 [ 419.177656][T21960] do_vfs_ioctl+0xd6e/0x1390 [ 419.182282][T21960] ? ioctl_preallocate+0x210/0x210 [ 419.187415][T21960] ? __fget+0x381/0x550 [ 419.191611][T21960] ? ksys_dup3+0x3e0/0x3e0 [ 419.196037][T21960] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 419.202282][T21960] ? fput_many+0x12c/0x1a0 [ 419.206738][T21960] ? tomoyo_file_ioctl+0x23/0x30 [ 419.211699][T21960] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 419.217951][T21960] ? security_file_ioctl+0x93/0xc0 [ 419.223080][T21960] ksys_ioctl+0xab/0xd0 [ 419.227253][T21960] __x64_sys_ioctl+0x73/0xb0 [ 419.231862][T21960] do_syscall_64+0x103/0x610 [ 419.236468][T21960] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 419.242384][T21960] RIP: 0033:0x458079 [ 419.246289][T21960] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 419.265913][T21960] RSP: 002b:00007fb53930ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 05:38:41 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0045878, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) [ 419.274537][T21960] RAX: ffffffffffffffda RBX: 00007fb53930ac90 RCX: 0000000000458079 [ 419.282538][T21960] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 419.290549][T21960] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 419.298913][T21960] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb53930b6d4 [ 419.306942][T21960] R13: 00000000004c082b R14: 00000000004d25a0 R15: 0000000000000005 05:38:41 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:41 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:41 executing program 1: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480), 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)) 05:38:41 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0045878, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:41 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:42 executing program 3 (fault-call:2 fault-nth:3): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:42 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x100000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:42 executing program 1: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480), 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)) 05:38:42 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:42 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184904, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:42 executing program 1: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{0x0}], 0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)) 05:38:42 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184905, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) [ 419.980653][T22018] FAULT_INJECTION: forcing a failure. [ 419.980653][T22018] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 420.042792][T22018] CPU: 0 PID: 22018 Comm: syz-executor.3 Not tainted 5.1.0-rc1+ #29 [ 420.050845][T22018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.061018][T22018] Call Trace: [ 420.064351][T22018] dump_stack+0x172/0x1f0 [ 420.069014][T22018] should_fail.cold+0xa/0x15 [ 420.073660][T22018] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 420.079512][T22018] ? ___might_sleep+0x163/0x280 [ 420.084429][T22018] should_fail_alloc_page+0x50/0x60 [ 420.089659][T22018] __alloc_pages_nodemask+0x1a1/0x7e0 [ 420.095074][T22018] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 420.100828][T22018] ? find_held_lock+0x35/0x130 [ 420.105610][T22018] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 420.111258][T22018] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 420.117522][T22018] alloc_pages_current+0x107/0x210 [ 420.122668][T22018] __get_free_pages+0xc/0x40 [ 420.127269][T22018] sg_kmalloc+0x57/0x70 [ 420.131436][T22018] __sg_alloc_table+0x259/0x3a0 [ 420.136309][T22018] ? sgl_alloc+0x30/0x30 [ 420.140586][T22018] sg_alloc_table+0x3b/0x290 [ 420.145199][T22018] ion_system_heap_allocate+0x434/0xaa0 [ 420.150769][T22018] ? ion_system_heap_free+0x250/0x250 [ 420.156156][T22018] ? ion_ioctl+0xa3c/0xf70 [ 420.160597][T22018] ion_ioctl+0x3d8/0xf70 [ 420.164881][T22018] ? _ion_buffer_destroy+0x110/0x110 [ 420.170216][T22018] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 420.176063][T22018] ? __fget+0x35a/0x550 [ 420.180244][T22018] ? _ion_buffer_destroy+0x110/0x110 [ 420.185556][T22018] do_vfs_ioctl+0xd6e/0x1390 [ 420.190185][T22018] ? ioctl_preallocate+0x210/0x210 [ 420.195312][T22018] ? __fget+0x381/0x550 [ 420.199491][T22018] ? ksys_dup3+0x3e0/0x3e0 [ 420.203928][T22018] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 420.210176][T22018] ? fput_many+0x12c/0x1a0 [ 420.214618][T22018] ? tomoyo_file_ioctl+0x23/0x30 [ 420.219574][T22018] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 420.225836][T22018] ? security_file_ioctl+0x93/0xc0 [ 420.230973][T22018] ksys_ioctl+0xab/0xd0 [ 420.235146][T22018] __x64_sys_ioctl+0x73/0xb0 [ 420.239767][T22018] do_syscall_64+0x103/0x610 [ 420.244375][T22018] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 420.250272][T22018] RIP: 0033:0x458079 [ 420.254174][T22018] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 420.273793][T22018] RSP: 002b:00007fb53930ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 420.282218][T22018] RAX: ffffffffffffffda RBX: 00007fb53930ac90 RCX: 0000000000458079 05:38:42 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) [ 420.290194][T22018] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 420.298175][T22018] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 420.306159][T22018] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb53930b6d4 [ 420.314141][T22018] R13: 00000000004c082b R14: 00000000004d25a0 R15: 0000000000000005 05:38:42 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:42 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184908, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:42 executing program 1: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{0x0}], 0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)) [ 420.569565][T22047] ion_ioctl: ioctl validate failed 05:38:42 executing program 3 (fault-call:2 fault-nth:4): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:42 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:42 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x2000000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:42 executing program 1: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{0x0}], 0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)) 05:38:43 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0189436, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:43 executing program 1: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x80000040045010, &(0x7f0000000040)) [ 420.767926][T22060] FAULT_INJECTION: forcing a failure. [ 420.767926][T22060] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 420.788040][T22060] CPU: 1 PID: 22060 Comm: syz-executor.3 Not tainted 5.1.0-rc1+ #29 [ 420.796057][T22060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.806119][T22060] Call Trace: [ 420.806148][T22060] dump_stack+0x172/0x1f0 [ 420.806172][T22060] should_fail.cold+0xa/0x15 [ 420.806195][T22060] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 420.806220][T22060] ? ___might_sleep+0x163/0x280 [ 420.813835][T22060] should_fail_alloc_page+0x50/0x60 [ 420.813852][T22060] __alloc_pages_nodemask+0x1a1/0x7e0 [ 420.813874][T22060] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 420.845370][T22060] ? find_held_lock+0x35/0x130 [ 420.850148][T22060] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 420.855809][T22060] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 420.862089][T22060] alloc_pages_current+0x107/0x210 [ 420.867229][T22060] __get_free_pages+0xc/0x40 [ 420.871830][T22060] sg_kmalloc+0x57/0x70 [ 420.875996][T22060] __sg_alloc_table+0x259/0x3a0 [ 420.880848][T22060] ? sgl_alloc+0x30/0x30 [ 420.885102][T22060] sg_alloc_table+0x3b/0x290 [ 420.889700][T22060] ion_system_heap_allocate+0x434/0xaa0 [ 420.895252][T22060] ? ion_system_heap_free+0x250/0x250 [ 420.900646][T22060] ? ion_ioctl+0xa3c/0xf70 [ 420.905088][T22060] ion_ioctl+0x3d8/0xf70 [ 420.909337][T22060] ? lock_downgrade+0x880/0x880 [ 420.914219][T22060] ? _ion_buffer_destroy+0x110/0x110 [ 420.919510][T22060] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 420.925335][T22060] ? __fget+0x35a/0x550 [ 420.929500][T22060] ? _ion_buffer_destroy+0x110/0x110 [ 420.934791][T22060] do_vfs_ioctl+0xd6e/0x1390 [ 420.939392][T22060] ? ioctl_preallocate+0x210/0x210 [ 420.945113][T22060] ? __fget+0x381/0x550 [ 420.949276][T22060] ? ksys_dup3+0x3e0/0x3e0 [ 420.953708][T22060] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 420.959953][T22060] ? fput_many+0x12c/0x1a0 [ 420.964376][T22060] ? tomoyo_file_ioctl+0x23/0x30 [ 420.969323][T22060] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 420.975569][T22060] ? security_file_ioctl+0x93/0xc0 [ 420.980705][T22060] ksys_ioctl+0xab/0xd0 [ 420.984873][T22060] __x64_sys_ioctl+0x73/0xb0 [ 420.989466][T22060] do_syscall_64+0x103/0x610 [ 420.994153][T22060] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 421.000073][T22060] RIP: 0033:0x458079 [ 421.003967][T22060] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 421.023572][T22060] RSP: 002b:00007fb53930ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 421.031983][T22060] RAX: ffffffffffffffda RBX: 00007fb53930ac90 RCX: 0000000000458079 [ 421.039958][T22060] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 421.047929][T22060] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 421.055921][T22060] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb53930b6d4 [ 421.063890][T22060] R13: 00000000004c082b R14: 00000000004d25a0 R15: 0000000000000005 05:38:43 executing program 3 (fault-call:2 fault-nth:5): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:43 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:43 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc020660b, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:43 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x8) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) [ 421.233591][T22080] FAULT_INJECTION: forcing a failure. [ 421.233591][T22080] name failslab, interval 1, probability 0, space 0, times 0 [ 421.274411][T22080] CPU: 0 PID: 22080 Comm: syz-executor.3 Not tainted 5.1.0-rc1+ #29 [ 421.282447][T22080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.292539][T22080] Call Trace: [ 421.295865][T22080] dump_stack+0x172/0x1f0 [ 421.300221][T22080] should_fail.cold+0xa/0x15 [ 421.304838][T22080] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 421.310688][T22080] ? ___might_sleep+0x163/0x280 [ 421.315567][T22080] __should_failslab+0x121/0x190 [ 421.320567][T22080] should_failslab+0x9/0x14 [ 421.325082][T22080] __kmalloc+0x2dc/0x740 [ 421.329347][T22080] ? alloc_pages_current+0x10f/0x210 [ 421.334673][T22080] ? sg_kmalloc+0x38/0x70 [ 421.339026][T22080] sg_kmalloc+0x38/0x70 [ 421.343202][T22080] __sg_alloc_table+0x259/0x3a0 [ 421.348079][T22080] ? sgl_alloc+0x30/0x30 [ 421.352355][T22080] sg_alloc_table+0x3b/0x290 [ 421.356971][T22080] ion_system_heap_allocate+0x434/0xaa0 [ 421.362556][T22080] ? ion_system_heap_free+0x250/0x250 [ 421.367949][T22080] ? ion_ioctl+0xa3c/0xf70 [ 421.373930][T22080] ion_ioctl+0x3d8/0xf70 [ 421.378185][T22080] ? lock_downgrade+0x880/0x880 [ 421.383069][T22080] ? _ion_buffer_destroy+0x110/0x110 [ 421.388374][T22080] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 421.394215][T22080] ? __fget+0x35a/0x550 [ 421.398400][T22080] ? _ion_buffer_destroy+0x110/0x110 [ 421.403712][T22080] do_vfs_ioctl+0xd6e/0x1390 [ 421.408412][T22080] ? ioctl_preallocate+0x210/0x210 [ 421.413538][T22080] ? __fget+0x381/0x550 [ 421.417717][T22080] ? ksys_dup3+0x3e0/0x3e0 [ 421.422143][T22080] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 421.428389][T22080] ? fput_many+0x12c/0x1a0 [ 421.432834][T22080] ? tomoyo_file_ioctl+0x23/0x30 [ 421.437783][T22080] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 421.444051][T22080] ? security_file_ioctl+0x93/0xc0 [ 421.449185][T22080] ksys_ioctl+0xab/0xd0 [ 421.453359][T22080] __x64_sys_ioctl+0x73/0xb0 [ 421.457965][T22080] do_syscall_64+0x103/0x610 [ 421.462577][T22080] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 421.468495][T22080] RIP: 0033:0x458079 [ 421.472422][T22080] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 421.492035][T22080] RSP: 002b:00007fb53930ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 421.500460][T22080] RAX: ffffffffffffffda RBX: 00007fb53930ac90 RCX: 0000000000458079 [ 421.508461][T22080] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 421.516448][T22080] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 421.524424][T22080] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb53930b6d4 [ 421.532403][T22080] R13: 00000000004c082b R14: 00000000004d25a0 R15: 0000000000000005 05:38:44 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:44 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x4}) 05:38:44 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x9) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:44 executing program 1: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x80000040045010, &(0x7f0000000040)) 05:38:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:44 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x5}) 05:38:44 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:44 executing program 3 (fault-call:2 fault-nth:6): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:44 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x900) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:44 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x8}) 05:38:44 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) [ 422.103834][T22123] FAULT_INJECTION: forcing a failure. [ 422.103834][T22123] name failslab, interval 1, probability 0, space 0, times 0 [ 422.153402][T22123] CPU: 1 PID: 22123 Comm: syz-executor.3 Not tainted 5.1.0-rc1+ #29 [ 422.161416][T22123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.171482][T22123] Call Trace: [ 422.174792][T22123] dump_stack+0x172/0x1f0 [ 422.179187][T22123] should_fail.cold+0xa/0x15 [ 422.183809][T22123] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 422.189644][T22123] ? ___might_sleep+0x163/0x280 [ 422.194525][T22123] __should_failslab+0x121/0x190 [ 422.199521][T22123] should_failslab+0x9/0x14 [ 422.204038][T22123] __kmalloc+0x2dc/0x740 [ 422.208298][T22123] ? lock_downgrade+0x880/0x880 [ 422.213262][T22123] ? wait_for_completion+0x440/0x440 [ 422.218566][T22123] ? dma_buf_export+0x1eb/0x9b0 [ 422.223423][T22123] dma_buf_export+0x1eb/0x9b0 [ 422.228108][T22123] ion_ioctl+0xae2/0xf70 [ 422.232354][T22123] ? lock_downgrade+0x880/0x880 [ 422.237218][T22123] ? _ion_buffer_destroy+0x110/0x110 [ 422.242506][T22123] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 422.248332][T22123] ? __fget+0x35a/0x550 [ 422.252500][T22123] ? _ion_buffer_destroy+0x110/0x110 [ 422.257793][T22123] do_vfs_ioctl+0xd6e/0x1390 [ 422.262403][T22123] ? ioctl_preallocate+0x210/0x210 [ 422.267518][T22123] ? __fget+0x381/0x550 [ 422.271709][T22123] ? ksys_dup3+0x3e0/0x3e0 [ 422.276128][T22123] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 422.282368][T22123] ? fput_many+0x12c/0x1a0 [ 422.286793][T22123] ? tomoyo_file_ioctl+0x23/0x30 [ 422.291750][T22123] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 422.297990][T22123] ? security_file_ioctl+0x93/0xc0 [ 422.303103][T22123] ksys_ioctl+0xab/0xd0 [ 422.307265][T22123] __x64_sys_ioctl+0x73/0xb0 [ 422.311859][T22123] do_syscall_64+0x103/0x610 [ 422.316459][T22123] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 422.322355][T22123] RIP: 0033:0x458079 [ 422.326262][T22123] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 422.345871][T22123] RSP: 002b:00007fb53930ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 05:38:44 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x3f00) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) [ 422.354630][T22123] RAX: ffffffffffffffda RBX: 00007fb53930ac90 RCX: 0000000000458079 [ 422.362600][T22123] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 422.370577][T22123] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 422.378553][T22123] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb53930b6d4 [ 422.386528][T22123] R13: 00000000004c082b R14: 00000000004d25a0 R15: 0000000000000005 05:38:44 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x500}) 05:38:44 executing program 3 (fault-call:2 fault-nth:7): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:44 executing program 1: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x80000040045010, &(0x7f0000000040)) 05:38:44 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:44 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40000) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) [ 422.631018][T22146] FAULT_INJECTION: forcing a failure. [ 422.631018][T22146] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 422.690183][T22146] CPU: 0 PID: 22146 Comm: syz-executor.3 Not tainted 5.1.0-rc1+ #29 [ 422.698228][T22146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.708316][T22146] Call Trace: [ 422.711648][T22146] dump_stack+0x172/0x1f0 [ 422.716023][T22146] should_fail.cold+0xa/0x15 [ 422.720651][T22146] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 422.726490][T22146] ? ion_page_pool_alloc+0xbb/0x1d0 [ 422.731731][T22146] should_fail_alloc_page+0x50/0x60 [ 422.736957][T22146] __alloc_pages_nodemask+0x1a1/0x7e0 [ 422.742356][T22146] ? mutex_trylock+0x1e0/0x1e0 [ 422.747149][T22146] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 422.752909][T22146] ? wait_for_completion+0x440/0x440 [ 422.758383][T22146] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 422.764640][T22146] alloc_pages_current+0x107/0x210 [ 422.769959][T22146] ion_page_pool_alloc+0x137/0x1d0 [ 422.775088][T22146] ion_system_heap_allocate+0x165/0xaa0 [ 422.780696][T22146] ? ion_system_heap_free+0x250/0x250 [ 422.786105][T22146] ? ion_ioctl+0xa3c/0xf70 [ 422.790566][T22146] ion_ioctl+0x3d8/0xf70 [ 422.794861][T22146] ? _ion_buffer_destroy+0x110/0x110 [ 422.800169][T22146] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 422.806013][T22146] ? __fget+0x35a/0x550 [ 422.810190][T22146] ? _ion_buffer_destroy+0x110/0x110 [ 422.815491][T22146] do_vfs_ioctl+0xd6e/0x1390 [ 422.820122][T22146] ? ioctl_preallocate+0x210/0x210 [ 422.825385][T22146] ? __fget+0x381/0x550 [ 422.829572][T22146] ? ksys_dup3+0x3e0/0x3e0 [ 422.833999][T22146] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 422.840248][T22146] ? fput_many+0x12c/0x1a0 [ 422.844686][T22146] ? tomoyo_file_ioctl+0x23/0x30 [ 422.849634][T22146] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 422.855885][T22146] ? security_file_ioctl+0x93/0xc0 [ 422.861012][T22146] ksys_ioctl+0xab/0xd0 [ 422.865186][T22146] __x64_sys_ioctl+0x73/0xb0 [ 422.869789][T22146] do_syscall_64+0x103/0x610 [ 422.874574][T22146] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 422.880490][T22146] RIP: 0033:0x458079 [ 422.884409][T22146] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 422.904025][T22146] RSP: 002b:00007fb53930ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 422.912467][T22146] RAX: ffffffffffffffda RBX: 00007fb53930ac90 RCX: 0000000000458079 [ 422.920452][T22146] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 422.928435][T22146] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 422.936426][T22146] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb53930b6d4 [ 422.944670][T22146] R13: 00000000004c082b R14: 00000000004d25a0 R15: 0000000000000005 05:38:45 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:45 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x1000000) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) [ 423.224118][ C1] net_ratelimit: 24 callbacks suppressed [ 423.224127][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 423.236128][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:38:45 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:45 executing program 1: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x0, &(0x7f0000000040)) 05:38:45 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x8000000) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:45 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x4000}) 05:38:45 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:45 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x9000000) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:45 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:46 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x2, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:46 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x3f000000) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b0") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:46 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:46 executing program 1: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x0, &(0x7f0000000040)) 05:38:46 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x5421, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:46 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4000000000000) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:46 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) [ 424.424376][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 424.430190][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 424.436088][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 424.441856][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:38:46 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x400000}) 05:38:46 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x5450, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:46 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x100000000000000) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:46 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) [ 424.514121][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 424.519942][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 424.525810][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 424.531594][ C0] protocol 88fb is buggy, dev hsr_slave_1 05:38:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(0x0, 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:46 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:47 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x5451, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:47 executing program 1: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x0, &(0x7f0000000040)) 05:38:47 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x800000000000000) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(0x0, 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:47 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x5452, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:47 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:47 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x80ffff}) 05:38:47 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x900000000000000) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(0x0, 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:47 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x5460, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:47 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:47 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x40049409, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:47 executing program 1: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80000040045010, 0x0) 05:38:47 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x3f00000000000000) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:47 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x4020940d, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:47 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:48 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:48 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0045878, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:48 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x4000000}) 05:38:48 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:48 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x80000, 0x84) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') open(&(0x7f00000003c0)='./file0\x00', 0x20000, 0x20) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/autofs\x00', 0x80000, 0x0) ioctl$NBD_SET_TIMEOUT(r3, 0xab09, 0x1f) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800891}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf25090000003c00010038000400200001000a004e2300000006ff01000000000000000000000000000101fdff7f1400020002004e237f00000100000000000000000c0802000800020009000000695f102f988869a3ff947cd21adaa48286006cf8719601aa3a9c7614b11af9db354fe4823ea427c3b5f3dd160ca766f41ca67c8b96b65b4c51b8be97302b"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) sendto$x25(r3, &(0x7f0000000280)="856cac085a867711f5c8956888a464dee203b0546a2edfb868000f9142377dd95e94d5a28dc755cf5c0a23c79b86ffbd672e278cf48219fa110d4bd16fbee8c91167acc5de06d86112e0c391f2ea537da2e7ffc6cb99751d8daeee81c9cb89b936a31faaf4e0929315546886fae4607c969db6a343a98806c9f6fae7db3d637ce2904c74e050b0eb19b534d3ca36ed6fa81e10342b451f48f477a0ec8d64284eef19fba8ee232d3ee103f0e8fc101812e3e6c6dde2140aae9e4f1616289cb00fda5455a6", 0xc4, 0x4, &(0x7f0000000380)={0x9, @remote={[], 0x1}}, 0x12) 05:38:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:48 executing program 1: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80000040045010, 0x0) 05:38:48 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0045878, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:48 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:48 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184904, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:48 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, 0x0, 0x0) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:48 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184905, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, 0x0, 0x0) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:49 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0xfffffe9e) 05:38:49 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x5000000}) 05:38:49 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, 0x0, 0x0) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:49 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184908, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:49 executing program 1: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80000040045010, 0x0) 05:38:49 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0189436, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480), 0x0) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:49 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x8000000}) 05:38:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480), 0x0) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:49 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:49 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc020660b, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:38:50 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080), &(0x7f00000000c0)=0x4) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000040)={0x0, 0xfb, 0x22, 0x2, 0x3ff, "5d6a0696a0afbfd5226d86b997c230ba", "566b6599ea5060a2488bbf9b04"}, 0x22, 0x2) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480), 0x0) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:50 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:50 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x4}) 05:38:50 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0xfdfdffff}) 05:38:50 executing program 1: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x80000040045010, 0x0) 05:38:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{0x0}], 0x1) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:50 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0xffff8000}) 05:38:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{0x0}], 0x1) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:50 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400000, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x721) 05:38:50 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x5}) 05:38:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{0x0}], 0x1) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000040)) 05:38:50 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0xfffffdfd}) 05:38:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x80000040045010, &(0x7f0000000040)) 05:38:50 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:50 executing program 4: socketpair(0x3, 0x80000, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvfrom$inet6(r1, &(0x7f0000000040)=""/189, 0xbd, 0x2, &(0x7f0000000100)={0xa, 0x4e22, 0x9, @remote, 0xfffffffffffffff8}, 0x1c) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sched_yield() pkey_alloc(0x0, 0x1) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x1, 0x4) recvfrom$inet6(r0, &(0x7f0000000180)=""/162, 0xa2, 0x141, &(0x7f0000000240)={0xa, 0x4e21, 0x3, @local, 0x1}, 0x1c) 05:38:50 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x8}) 05:38:50 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:50 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 428.584135][ C1] net_ratelimit: 16 callbacks suppressed [ 428.584143][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 428.595752][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 428.601608][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 428.607478][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 428.664171][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 428.670085][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 428.676020][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 428.681984][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 428.687889][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 428.693684][ C0] protocol 88fb is buggy, dev hsr_slave_1 05:38:51 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:51 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x100000000, 0x0, 0x717, 0x207, 0x10}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)={r2, 0x5, 0x6, [0x394, 0x4, 0x7, 0x1, 0x9, 0x800]}, &(0x7f0000000200)=0x14) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x80000040045010, &(0x7f0000000040)) 05:38:51 executing program 4: socketpair(0x1, 0x1, 0x9, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x40, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000000140)={0x2, &(0x7f0000000080)=""/93, &(0x7f0000000100)=[{0x7fff, 0xe7, 0x8, &(0x7f0000000200)=""/231}, {0x7, 0xad, 0x57, &(0x7f0000000300)=""/173}]}) syz_mount_image$bfs(&(0x7f00000003c0)='bfs\x00', &(0x7f0000000440)='./file0\x00', 0x1, 0x7, &(0x7f00000018c0)=[{&(0x7f00000004c0)="d0b6f28d521f6bda2e50c2db001ade5d412054fe71a154e0dcbb291f0ac634f5516c62217d951f69ffbefa8ad66cfbe71d14294045041c193501f5451135ec766a23db2b7f2719290f9c1c58a3c7d8c4b5bd1d889672a69cf57fa97adf6e9b3da7ccdc0e1ff8cecc0ae7b73ce0f7dd224266824e8d363bc964d7c4bbdcbb5d39061325d58e10d08ec19dc28685efa40a52914115acf046d007f88d0591e41914111678d44d0740a6cc2892ee9a842cf95ccdfd2ca9ac361440e4306b430af823238c448c643ec4", 0xc7, 0x3}, {&(0x7f00000005c0)="4624d643b66a58df2ebff7c01005d8a074526238b31093c0cca101758fd43b6cd657344e227a2a59206a81a4ff4324b58b730489815bad59d1367ee85d294c04d73d92d0f14fcd5fed1b73c6a3644c28cfefeef9688a6b815c15962b08c6c2d145c4b1b385", 0x65, 0x91}, {&(0x7f0000000640)="b71e4c11b16a42d40703ae61481e18eef7594bfa52889da6a4c9d45b402d5bdab3621b1721b967415d5b4e1365983b064fc4906f185fa772990d2572ecf03b9c375b1c80b581014cce30578ba3b10dc4586ea342710ad098fbda0a5103b34c6cb7cd19cb717fdb62038a4d954edafef5bd5fcaed0459cdafab01875bef1e832ebe92119b15099a17c7ed2f06b8179703f4d74f8754ac2eefb3209b7b5c3b451d87d2251344bb7877893707a3fe3f951c95cfda917b29e2a3e3b518a071802a6855a90ec18e425734e1608eec3d81e1739a9819429524670688d940c14758f9", 0xdf, 0x180000000000000}, {&(0x7f0000000740)="bef15181a9ee7200b55c9f9b16a84e61d0b3e56c7dd51388e7b7c2c2c2334fc75f86b9ed0a0a8fdf54f68f5c372edccfb2d597aaf2d0c133c3c7201bb14515f0c60fa402ac", 0x45, 0x8}, {&(0x7f00000007c0)="3776b8d9e3b13c2acf8fb745cd83b9e2dc7b812507b9772531e77a110832433a94dec14651eb498c8c98f71ff945e40d654c3650bf150319ed1f0bef349091ce898f0772d5a9274215f855dd64589d72bae167eda87acd9143a75b64", 0x5c}, {&(0x7f0000000840)="274e02b693de7dd373be5211559a7a82bc0083af5d191ec1cb0d2cdd77a585d02467d0080f9c8c442700aee3eca7f4fd30ab245be4c9036ec4ec82a26a8e8c6e01e11875cfd16eed247e92bc3dced9b1cc444dc7576c953e", 0x58, 0x1}, {&(0x7f00000008c0)="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", 0x1000, 0x40}], 0x110402, 0x0) 05:38:51 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x8}) 05:38:51 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x1000000000000}) 05:38:51 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0xfffffdfd}) 05:38:51 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x80000040045010, &(0x7f0000000040)) 05:38:52 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:52 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="040227bd7000fb02df2501000000100e04000001000100ff070000"], 0x24}}, 0x4000000) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:52 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:52 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x500}) 05:38:52 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x83, 0x0}, 0x2000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xaed7, 0x80480) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:52 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:52 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0xfffffdfd}) 05:38:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x0, &(0x7f0000000040)) 05:38:52 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) accept4$packet(r0, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001c00)=0x14, 0x0) sendmsg$nl_route(r1, &(0x7f0000001d00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4082400}, 0xc, &(0x7f0000001cc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001300200125bd7000fddbdf2507000000", @ANYRES32=r2, @ANYBLOB="002000004408000008002700000000001400140076657468305f746b5f6873720000000008001000200000008cd825742a4b882330ed88aa4f7088f2a1867413702fa03899c07c33838e1ce34426cc533eee5e1b3233dcb8213755d1e579733bd3"], 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x20004000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:53 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x40000000000000}) 05:38:53 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000040)={0x7, 0x2, 0x1ff}) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x0, &(0x7f0000000040)) 05:38:53 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x4000}) 05:38:53 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:53 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0xfffffdfd}) 05:38:53 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpeername$unix(r1, &(0x7f0000000000), &(0x7f0000000080)=0x6e) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:53 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x80ffff00000000}) 05:38:53 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x0, &(0x7f0000000040)) 05:38:54 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_SMI(r1, 0xaeb7) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:54 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:54 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0xfffffdfd}) 05:38:54 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:54 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0xfffffdfd}) 05:38:54 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x400000}) 05:38:54 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0xfffffdfd}) 05:38:54 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x400000000000000}) 05:38:54 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x80000040045010, 0x0) 05:38:55 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0xfffffffffffffecb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000000c0)) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100)=0xffffffff, 0x1) accept4$netrom(r0, &(0x7f0000000000)={{0x3, @default}, [@rose, @netrom, @netrom, @rose, @bcast, @null, @null, @netrom]}, &(0x7f0000000080)=0x48, 0x80800) 05:38:55 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0xfffffdfd}) 05:38:55 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:55 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=@delpolicy={0xc4, 0x14, 0x701, 0x70bd26, 0x25dfdbfc, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@mcast1, 0x4e23, 0x8, 0x4e20, 0x7f, 0x2, 0x20, 0x80, 0x3a, 0x0, r2}, 0x6e6bb3, 0x1}, [@algo_auth_trunc={0x68, 0x14, {{'vmac(des)\x00'}, 0xe0, 0xc0, "76aadc091ad689d71f8c2ed93137247ca1a6109f17100ba167c1a1a8"}}, @lastused={0xc, 0xf, 0x101}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x1) 05:38:55 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x80000040045010, 0x0) 05:38:55 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0xfffffdfd}) 05:38:55 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x80ffff}) 05:38:55 executing program 4: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$KDSETMODE(r0, 0x4b3a, 0x400) r1 = semget$private(0x0, 0x3, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) socketpair(0x2002, 0x800, 0x8, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r0, &(0x7f0000000400)='threaded\x00', 0x9) r3 = msgget$private(0x0, 0x60) msgsnd(r3, &(0x7f0000000040)={0x3, "06c104a2d6303d903d46c386ca9201ec48f7de0af48b982014c673b1dfb26f8a4fe02871e8265320193757c2b13447ba60f1"}, 0x3a, 0x0) 05:38:55 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x500000000000000}) 05:38:55 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3, 0xa70224b63e6f98d3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x4000, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:55 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) [ 433.624122][ C1] net_ratelimit: 24 callbacks suppressed [ 433.624131][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 433.636100][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:38:56 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:56 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0xfffffdfd}) 05:38:56 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r1, 0x80000040045010, 0x0) 05:38:56 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0xfffffdfd}) 05:38:56 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:56 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0xfffffdfd}) 05:38:56 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x4000000}) 05:38:56 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0xfffffdfd}) [ 434.824150][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 434.830114][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 434.836035][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 434.841826][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 434.904129][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 434.909975][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 434.915907][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 434.921678][ C0] protocol 88fb is buggy, dev hsr_slave_1 05:38:57 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x401, 0x10000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0xcc7d) sendto(r0, &(0x7f0000000200)="5e6ae4e7e9609b10cc8dc0d29292b752c8aa74cc6c450a227edffd303c8e621030c14d47ed0db801159628b88caea4877e42a18e78e00fd80545e747051eefce06161b5b3e32fa15312180debe51932a0390438f9ac01410d5b858cae8fa7ffdf44cf0301a592370b8f54119eeb4fc7b9c2bb649be7f2dbe3bfeee5e4e406929993347700e28e35823b9fa22d604da369cc383da8eefeae126f7d1dcae201f09c04dcdd78311d913050f432594afbe6ab529c569", 0xb4, 0x4050, &(0x7f00000002c0)=@x25={0x9, @null=' \x00'}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000080)) connect$caif(r1, &(0x7f00000000c0)=@util={0x25, "040ee5c719615162f38b87570e221d20"}, 0x18) recvmsg$kcm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r2, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:57 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x800000000000000}) 05:38:57 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:57 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0xfffffdfd}) 05:38:57 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x80ffff}) 05:38:57 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x5000000}) 05:38:57 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x500000000000000}) 05:38:57 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0xfffffdfd}) 05:38:57 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xfffffffffffffee5}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:57 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:38:57 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:57 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:38:58 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x100, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() fchownat(r2, &(0x7f0000000040)='./file0\x00', r3, r4, 0x400) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x3) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:58 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) [ 435.855973][T22809] syz-executor.3: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 435.884753][T22809] CPU: 0 PID: 22809 Comm: syz-executor.3 Not tainted 5.1.0-rc1+ #29 [ 435.892792][T22809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.902876][T22809] Call Trace: [ 435.906194][T22809] dump_stack+0x172/0x1f0 [ 435.910546][T22809] warn_alloc.cold+0x87/0x17f [ 435.915250][T22809] ? zone_watermark_ok_safe+0x260/0x260 [ 435.920829][T22809] ? get_page_from_freelist+0x4170/0x4170 [ 435.926578][T22809] ? __isolate_free_page+0x4c0/0x4c0 [ 435.931886][T22809] ? drain_all_pages+0x4d/0x590 [ 435.936761][T22809] __alloc_pages_slowpath+0x231d/0x28b0 [ 435.942344][T22809] ? warn_alloc+0x110/0x110 [ 435.946861][T22809] ? find_held_lock+0x35/0x130 [ 435.951653][T22809] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 435.957905][T22809] ? should_fail+0x1de/0x852 [ 435.962520][T22809] ? __isolate_free_page+0x4c0/0x4c0 [ 435.967816][T22809] ? ___might_sleep+0x163/0x280 [ 435.972695][T22809] __alloc_pages_nodemask+0x57e/0x7e0 [ 435.978079][T22809] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 435.983819][T22809] ? wait_for_completion+0x440/0x440 [ 435.989122][T22809] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 435.995386][T22809] alloc_pages_current+0x107/0x210 [ 436.000524][T22809] ion_page_pool_alloc+0x137/0x1d0 [ 436.005657][T22809] ion_system_heap_allocate+0x165/0xaa0 [ 436.011240][T22809] ? ion_system_heap_free+0x250/0x250 [ 436.016639][T22809] ? ion_ioctl+0xa3c/0xf70 [ 436.021071][T22809] ion_ioctl+0x3d8/0xf70 [ 436.025338][T22809] ? _ion_buffer_destroy+0x110/0x110 [ 436.030651][T22809] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 436.036488][T22809] ? __fget+0x35a/0x550 [ 436.040667][T22809] ? _ion_buffer_destroy+0x110/0x110 [ 436.045974][T22809] do_vfs_ioctl+0xd6e/0x1390 [ 436.050599][T22809] ? ioctl_preallocate+0x210/0x210 [ 436.055722][T22809] ? __fget+0x381/0x550 [ 436.059901][T22809] ? ksys_dup3+0x3e0/0x3e0 [ 436.064333][T22809] ? nsecs_to_jiffies+0x30/0x30 [ 436.069202][T22809] ? tomoyo_file_ioctl+0x23/0x30 [ 436.074155][T22809] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 436.080416][T22809] ? security_file_ioctl+0x93/0xc0 [ 436.085546][T22809] ksys_ioctl+0xab/0xd0 [ 436.089726][T22809] __x64_sys_ioctl+0x73/0xb0 [ 436.094335][T22809] do_syscall_64+0x103/0x610 [ 436.098943][T22809] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 436.104853][T22809] RIP: 0033:0x458079 [ 436.108765][T22809] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 436.128388][T22809] RSP: 002b:00007fb5392c8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 436.136820][T22809] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458079 [ 436.144823][T22809] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 436.152819][T22809] RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000 [ 436.160820][T22809] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb5392c96d4 [ 436.168810][T22809] R13: 00000000004c082b R14: 00000000004d25a0 R15: 00000000ffffffff 05:38:58 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0xfdfdffff00000000}) 05:38:58 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:38:58 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x40, 0x4}, 0x2) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x2043, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1ff, 0x3, 0x0, 0xb, 0x1f, 0x4, "06b761b00308ec81a4ef778ca549fe94302761084a111303de52692159d1f141c0f2012570a7bad77a0bf6d8bae5456cb0d92cca907257b08af68c6da25a6b75", "97477229da852499344620ce6600821b912e01c4aa6a373d70a6a98eaaa883824e3c976d34a116af51e28bd81d0a7fc6a4343bcff602176ec1b2bcd98c253597", "9f820455c78819f209baaa7826ad2f1be82f89c3718129fd5e568291f42e15e9", [0x1000, 0x1f]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) process_vm_readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/160, 0xa0}, {&(0x7f00000004c0)=""/197, 0xc5}], 0x2, &(0x7f0000000740)=[{&(0x7f0000000400)=""/17, 0x11}, {&(0x7f0000000440)=""/31, 0x1f}, {&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/105, 0x69}, {&(0x7f00000006c0)=""/70, 0x46}], 0x5, 0x0) write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0x9) prctl$PR_SET_TSC(0x1a, 0x1) [ 436.367383][T22809] Mem-Info: [ 436.370707][T22809] active_anon:107678 inactive_anon:186 isolated_anon:0 [ 436.370707][T22809] active_file:8089 inactive_file:36206 isolated_file:0 [ 436.370707][T22809] unevictable:0 dirty:105 writeback:0 unstable:0 [ 436.370707][T22809] slab_reclaimable:14853 slab_unreclaimable:105669 [ 436.370707][T22809] mapped:58625 shmem:245 pagetables:1086 bounce:0 [ 436.370707][T22809] free:191831 free_pcp:517 free_cma:0 [ 436.519039][T22809] Node 0 active_anon:431012kB inactive_anon:744kB active_file:32224kB inactive_file:144824kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:234600kB dirty:420kB writeback:0kB shmem:980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 380928kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 436.564185][T22809] Node 1 active_anon:0kB inactive_anon:0kB active_file:132kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 436.619994][T22809] Node 0 DMA free:10468kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 436.704167][T22809] lowmem_reserve[]: 0 2553 2555 2555 [ 436.712342][T22809] Node 0 DMA32 free:415096kB min:117748kB low:126804kB high:135860kB active_anon:430912kB inactive_anon:744kB active_file:32224kB inactive_file:144824kB unevictable:0kB writepending:420kB present:3129332kB managed:2617996kB mlocked:0kB kernel_stack:7328kB pagetables:4344kB bounce:0kB free_pcp:1984kB local_pcp:912kB free_cma:0kB [ 436.809095][T22809] lowmem_reserve[]: 0 0 2 2 [ 436.813680][T22809] Node 0 Normal free:8kB min:28kB low:32kB high:36kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:2204kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 436.846035][T22809] lowmem_reserve[]: 0 0 0 0 [ 436.850639][T22809] Node 1 Normal free:687768kB min:57720kB low:71124kB high:84528kB active_anon:0kB inactive_anon:0kB active_file:132kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870184kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 436.885078][T22809] lowmem_reserve[]: 0 0 0 0 [ 436.889646][T22809] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11492kB [ 436.911773][T22809] Node 0 DMA32: 9842*4kB (UM) 2028*8kB (UM) 3121*16kB (U) 1922*32kB (UM) 1*64kB (U) 358*128kB (U) 277*256kB (U) 143*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 357048kB [ 436.934163][T22809] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 436.955752][T22809] Node 1 Normal: 70*4kB (U) 272*8kB (UM) 242*16kB (U) 65*32kB (UM) 253*64kB (UM) 43*128kB (U) 43*256kB (UM) 35*512kB (UM) 5*1024kB (UM) 134*2048kB (U) 83*4096kB (U) = 678552kB [ 436.977732][T22809] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 436.987999][T22809] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 436.997539][T22809] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 437.007330][T22809] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 437.017074][T22809] 44539 total pagecache pages [ 437.021927][T22809] 0 pages in swap cache [ 437.026276][T22809] Swap cache stats: add 0, delete 0, find 0/0 [ 437.032491][T22809] Free swap = 0kB [ 437.036402][T22809] Total swap = 0kB [ 437.040236][T22809] 1965979 pages RAM [ 437.044225][T22809] 0 pages HighMem/MovableOnly [ 437.049067][T22809] 339406 pages reserved [ 437.053348][T22809] 0 pages cma reserved 05:38:59 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x8000000}) 05:38:59 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:59 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.sockprotoname\x00') ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000000)=""/118) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:38:59 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0xfffffdfd}) 05:38:59 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x500000000000000}) 05:38:59 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0xffffffff00000000}) 05:38:59 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0xfffffdfd}) 05:38:59 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x5000000}) 05:38:59 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xffffffd8}, 0x2000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000000440)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f00000005c0)=0xe8) mount$bpf(0x0, &(0x7f0000000080)='\x00', &(0x7f00000000c0)='bpf\x00', 0x80, &(0x7f0000000600)=ANY=[@ANYBLOB='mode=00000000000000000000400,subj_type=threaded\x00,euid<', @ANYRESDEC=r2, @ANYBLOB=',subj_role=threaded\x00,smackfsdef=,uid<', @ANYRESDEC=r3, @ANYBLOB=',uid<', @ANYRESDEC=r4, @ANYBLOB=',audit,obj_rgle=(,appraise_type=imasig,pcr=0020_000000000000039,\x00']) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) io_setup(0xa1c, &(0x7f0000000700)=0x0) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) io_getevents(r5, 0x1f, 0x1, &(0x7f0000000740)=[{}], &(0x7f00000007c0)={r6, r7+10000000}) connect$netrom(r1, &(0x7f0000000000)={{0x3, @default, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 05:38:59 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4}) 05:38:59 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:38:59 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0xfffffdfd}) 05:39:00 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0xfdfdffff}) 05:39:00 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0x0, 0xfffffdfd}) 05:39:00 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7, 0x18000) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000040)={{0x0, @dev={0xac, 0x14, 0x14, 0x11}, 0x4e20, 0x4, 'none\x00', 0x10, 0xffffffff, 0x80}, {@broadcast, 0x4e21, 0x0, 0xc5, 0x100000000, 0x8}}, 0x44) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{}, {}]}) write$cgroup_type(r2, &(0x7f0000000400)='threaded\x00', 0x9) 05:39:00 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:00 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0x0, 0xfffffdfd}) 05:39:00 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 05:39:00 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0x0, 0xfffffdfd}) [ 438.984155][ C1] net_ratelimit: 16 callbacks suppressed [ 438.984164][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 438.995714][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 439.001579][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 439.007513][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 439.064122][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 439.070043][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 439.075967][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 439.081959][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 439.087942][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 439.093858][ C0] protocol 88fb is buggy, dev hsr_slave_1 05:39:01 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x5000000}) 05:39:01 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:01 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:39:01 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0xffff8000}) 05:39:01 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5}) 05:39:01 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000040)={0xfff, 0xffffffffffffffff, 0x24a, 0x4}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xffffffffffffff85) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) write$apparmor_current(r2, &(0x7f0000000200)=@hat={'changehat ', 0x2, 0x5e, ['&/selinuxsecurity\x00', ')\x00', 'mime_type]&em1\x00', '\xb3\x00', '^\x00', 'nodevem1\x00', 'vmnet0em0GPLwlan0\x00']}, 0x5f) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) 05:39:01 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:02 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8}) 05:39:02 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:39:02 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:02 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x5000000}) 05:39:02 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0xfffffdfd}) 05:39:02 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:02 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:39:02 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0xd0000, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x48, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x7fff, @mcast2, 0x5}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e23, 0x1, @empty}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={r2, 0x1}, &(0x7f0000000400)=0x8) socketpair(0x8, 0x800, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair(0x200000000001, 0x1, 0x4, &(0x7f0000000140)={0x0, 0x0}) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000000240)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x4, @loopback, 0xe7}}, 0x24) ioctl$FIONREAD(r6, 0x541b, &(0x7f0000000100)) getsockname(r3, &(0x7f0000000600)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000680)=0x80) syz_emit_ethernet(0x22, &(0x7f0000000000)={@dev, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x28}, @dev}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002abd7000fbdbdf2515000000200005001c0002000800020000100000080004000400000008000200aa00000020000700080001007f0d00000c000400060000000000000008000100ffff0000e5b924858bc777ea03d96febb1a4756dce610260b5eeda"], 0x54}, 0x1, 0x0, 0x0, 0x40084}, 0x8084) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x9) 05:39:02 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r2 = msgget$private(0x0, 0x0) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000040)=""/160) ioctl$int_out(r1, 0x5462, &(0x7f0000000000)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x16000, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x40) write$cgroup_type(r3, &(0x7f0000000240)='threaded\x00', 0xffffffffffffff53) 05:39:02 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:02 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x5000000}) 05:39:02 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x500}) 05:39:03 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:39:03 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x5000000}) 05:39:03 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:03 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x5000000}) 05:39:04 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x1000000000000}) 05:39:04 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:04 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x5000000}) 05:39:04 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4}) 05:39:04 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4000}) 05:39:04 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_type(r0, &(0x7f0000000400)='threaded\x00', 0x9) 05:39:04 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x5000000}) 05:39:04 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readahead(r0, 0x81, 0x1f) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000300), &(0x7f00000002c0)=0xffffffffffffff69) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x90800, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x400001, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0xaf) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') 05:39:04 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:04 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:04 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0xfffffdfd}) 05:39:04 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x5000000}) 05:39:04 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x40000000000000}) 05:39:04 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x5000000}) 05:39:04 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x5000000}) 05:39:04 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x5000000}) 05:39:05 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x400000}) 05:39:05 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x5000000}) 05:39:05 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x3f, 0x8242) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0xfffffffffffffff7, 0x0, 0x10003, 0x400}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000080)={r3, 0x6}) 05:39:05 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:05 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x500}) 05:39:05 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x5000000}) 05:39:05 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x80ffff00000000}) 05:39:05 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x80000, 0x0) write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0x9) 05:39:05 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:39:05 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:05 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:39:05 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:06 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x80ffff}) 05:39:06 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x800000000000000}) 05:39:06 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:39:06 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:06 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x5000000}) [ 444.024114][ C1] net_ratelimit: 24 callbacks suppressed [ 444.024123][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 444.035807][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:39:06 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x400000000000000}) 05:39:06 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:06 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x82, 0x0, 0x5, 0x1, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, @perf_config_ext, 0x0, 0x0, 0x1, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={0x0, r2, 0xa, 0x3}, 0x122) r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xfffffffffffff801, 0x4800) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000200)) ioctl$VIDIOC_G_STD(r3, 0x80085617, &(0x7f0000000040)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) setpriority(0x0, r4, 0x7) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:39:06 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x5000000}) 05:39:06 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:06 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x5000000}) 05:39:06 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) select(0x40, &(0x7f0000000080)={0x9, 0x5, 0x800, 0x0, 0x0, 0x2, 0x5, 0x9}, &(0x7f00000000c0)={0x1ff, 0x20, 0x3, 0x7fffffff, 0x8, 0x0, 0x2, 0xefc6}, &(0x7f0000000100)={0x7, 0x87c, 0x5, 0xfffffffffffffff8, 0x4, 0x0, 0x8, 0x3}, &(0x7f0000000200)) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x90003, 0x0) read$eventfd(r2, &(0x7f0000000040), 0x8) [ 445.224137][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 445.229979][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 445.235890][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 445.241663][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 445.304165][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 445.310093][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 445.316018][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 445.321793][ C0] protocol 88fb is buggy, dev hsr_slave_1 05:39:07 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4000000}) 05:39:07 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0x0, 0x5000000}) 05:39:07 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:07 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) socket$caif_seqpacket(0x25, 0x5, 0x1) 05:39:07 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x500000000000000}) 05:39:07 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x800000000000000}) 05:39:07 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0x0, 0x5000000}) 05:39:08 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:08 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0x0, 0x5000000}) 05:39:08 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe63, 0x0, 0x0, 0x0, 0xfffffffffffffe57}, 0x0) write$cgroup_type(r0, &(0x7f0000000400)='threaded\x00', 0x9) 05:39:08 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:39:08 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:08 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5000000}) 05:39:08 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x80ffff}) 05:39:08 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:08 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x800000000000000}) 05:39:08 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:39:08 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:08 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:09 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8c}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x220, 0x70bd25, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8080) 05:39:09 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:09 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0xfdfdffff00000000}) 05:39:09 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2001, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:39:09 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:10 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:10 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8000000}) 05:39:10 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x80ffff}) 05:39:10 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0xffffffff00000000}) 05:39:10 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) r2 = msgget(0x2, 0x201) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000000)={{{@in=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xe8) r4 = getegid() lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getpid() r8 = gettid() r9 = syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x8, 0x80) ioctl$VIDIOC_SUBSCRIBE_EVENT(r9, 0x4020565a, &(0x7f00000004c0)={0x8001005, 0x9, 0x1}) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000380)={{0x20, r3, r4, r5, r6, 0x100, 0x6}, 0x6, 0x8, 0x1f, 0x7, 0x7, 0x81, r7, r8}) 05:39:10 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:39:10 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:10 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x2f, 0x0, 0x33a, 0x0, 0x163}, 0x100) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:39:10 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x1ba) 05:39:10 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:10 executing program 1: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:10 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5000000}) 05:39:10 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x0, 0x20000) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000000)={0x65, "8fc6ff9d9d13a27e023ca3e9e8afe302cf713481e8450ae75f890f8653d0598af1d4371c286d1ab249b82cfb8595a047a23b250faebe87ae95ddcd1cb535881aa7184c9798a4f4605c69331a472f18927442c29564f0d4072cbeb9064945ebbf9200d497d49ff1201e555f8653e99da1eb38b77e094650ab2ab87f9376c31647"}) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:39:10 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xfdfdffff}) 05:39:10 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4}) 05:39:10 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:11 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) r2 = geteuid() r3 = getegid() chown(&(0x7f0000000000)='./file0\x00', r2, r3) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000280)) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc6c}, 0xfffffffffffffffe) recvfrom$unix(r0, &(0x7f0000000080)=""/192, 0xc0, 0x40000001, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xffffffffffffffcf) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f00000003c0)={@default, @null}) name_to_handle_at(r0, &(0x7f0000000400)='./file0/file0\x00', &(0x7f00000004c0)={0x82, 0x2, "0bd7168b931d9ff089d5431186f00544f7c253143233333a5bc97efbbee94b045d45961d52412b50809e0ea05d15bd2fe116eca750c961cabd31bf6847ead9714e30f885f62b8166495883edd21de929c9f98ee9741c1edef47a776f1a958b766c0e228ac285991e31ebe74b9ac1816f6a0329cf5ac6e7f21d9b"}, &(0x7f0000000440), 0x1400) fstat(r0, &(0x7f0000000340)) 05:39:11 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x1ba) 05:39:11 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:11 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:39:11 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2208}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getrule={0x20, 0x22, 0x309, 0x70bd25, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x2, 0x8182, 0x0, 0x0, 0x7, 0x10}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 05:39:11 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:11 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x9, 0x4}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000200)={0x0, 0xfffffffffffffffd}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={r2, 0x9, 0x6, 0xb7, 0x4, 0x3, 0x1, 0x20, {r3, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80000001, 0x1f, 0x763, 0xd3d9, 0x7}}, &(0x7f0000000340)=0xb0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) 05:39:11 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x800000000000000}) 05:39:11 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) [ 449.384132][ C1] net_ratelimit: 16 callbacks suppressed [ 449.384142][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 449.395749][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 449.401580][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 449.407416][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 449.464146][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 449.470100][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 449.476053][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 449.481900][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 449.487823][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 449.493630][ C0] protocol 88fb is buggy, dev hsr_slave_1 05:39:12 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffff8000}) 05:39:12 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x200801, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000000)=0x5a3, 0x4) socketpair(0xa, 0x7, 0x7ff, &(0x7f0000000200)) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) write$cgroup_type(r2, &(0x7f0000000080)='threaded\x00', 0x9) 05:39:12 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5}) 05:39:12 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:12 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x400000000000000}) 05:39:12 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:39:12 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:12 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xfdfdffff}) 05:39:12 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0xfffffdfd}) 05:39:12 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:13 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8}) 05:39:13 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:13 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xfffffdfd}) 05:39:13 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x80ffff00000000}) 05:39:13 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) connect$netrom(r0, &(0x7f0000000000)={{0x3, @default, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x400000, 0x0) ioctl$KDENABIO(r2, 0x4b36) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r2, 0x6, 0x9, r2}) 05:39:13 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:13 executing program 0: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:13 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x500}) 05:39:13 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:14 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffe7f, 0x0, 0xfffffffffffffcff, 0x0, 0xffffffffffffffce}, 0x0) getcwd(&(0x7f0000000040)=""/235, 0xeb) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x3) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x400000, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) 05:39:14 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x5}) 05:39:14 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:14 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) 05:39:14 executing program 1 (fault-call:1 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) [ 452.136877][T23448] FAULT_INJECTION: forcing a failure. [ 452.136877][T23448] name failslab, interval 1, probability 0, space 0, times 0 [ 452.174257][T23448] CPU: 1 PID: 23448 Comm: syz-executor.1 Not tainted 5.1.0-rc1+ #29 [ 452.182294][T23448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.192375][T23448] Call Trace: [ 452.195699][T23448] dump_stack+0x172/0x1f0 [ 452.200060][T23448] should_fail.cold+0xa/0x15 [ 452.204672][T23448] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 452.210514][T23448] ? ___might_sleep+0x163/0x280 [ 452.215404][T23448] __should_failslab+0x121/0x190 [ 452.220375][T23448] should_failslab+0x9/0x14 [ 452.224898][T23448] kmem_cache_alloc_trace+0x2d1/0x760 [ 452.230296][T23448] ion_ioctl+0x2f6/0xf70 [ 452.234546][T23448] ? lock_downgrade+0x880/0x880 [ 452.239434][T23448] ? _ion_buffer_destroy+0x110/0x110 [ 452.244737][T23448] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 452.250576][T23448] ? __fget+0x35a/0x550 [ 452.254760][T23448] ? _ion_buffer_destroy+0x110/0x110 [ 452.260062][T23448] do_vfs_ioctl+0xd6e/0x1390 [ 452.264673][T23448] ? ioctl_preallocate+0x210/0x210 [ 452.269807][T23448] ? __fget+0x381/0x550 [ 452.273982][T23448] ? ksys_dup3+0x3e0/0x3e0 [ 452.278407][T23448] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 452.284656][T23448] ? fput_many+0x12c/0x1a0 [ 452.289097][T23448] ? tomoyo_file_ioctl+0x23/0x30 [ 452.294043][T23448] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 452.300735][T23448] ? security_file_ioctl+0x93/0xc0 [ 452.305868][T23448] ksys_ioctl+0xab/0xd0 [ 452.310061][T23448] __x64_sys_ioctl+0x73/0xb0 [ 452.314689][T23448] do_syscall_64+0x103/0x610 [ 452.319310][T23448] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 452.325204][T23448] RIP: 0033:0x458079 [ 452.329102][T23448] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 452.348719][T23448] RSP: 002b:00007f059ad27c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 452.357237][T23448] RAX: ffffffffffffffda RBX: 00007f059ad27c90 RCX: 0000000000458079 [ 452.365226][T23448] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 452.373229][T23448] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 452.381215][T23448] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f059ad286d4 [ 452.389198][T23448] R13: 00000000004c082b R14: 00000000004d25a0 R15: 0000000000000004 05:39:14 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1000000000000}) 05:39:14 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4000}) 05:39:14 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:14 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000000c0), 0x4) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffffffffe26, 0x0, 0xef}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000)=0xfffffffffffffffc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000100)={0x10000, 0x800, 0x200, 0x4, 0x9, 0x5, 0x6, 0xfbf9, 0x0}, &(0x7f0000000200)=0x20) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000240)={r5, 0xfffffffffffffc00, 0x5, 0x82bb, 0x3, 0x6}, &(0x7f0000000280)=0x14) 05:39:14 executing program 0 (fault-call:1 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) [ 452.702717][T23458] FAULT_INJECTION: forcing a failure. [ 452.702717][T23458] name failslab, interval 1, probability 0, space 0, times 0 [ 452.751244][T23458] CPU: 0 PID: 23458 Comm: syz-executor.0 Not tainted 5.1.0-rc1+ #29 [ 452.759289][T23458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.769357][T23458] Call Trace: [ 452.772674][T23458] dump_stack+0x172/0x1f0 [ 452.777033][T23458] should_fail.cold+0xa/0x15 [ 452.781655][T23458] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 452.787484][T23458] ? ___might_sleep+0x163/0x280 [ 452.792363][T23458] __should_failslab+0x121/0x190 [ 452.797315][T23458] should_failslab+0x9/0x14 [ 452.801915][T23458] kmem_cache_alloc_trace+0x2d1/0x760 [ 452.807307][T23458] ion_ioctl+0x2f6/0xf70 [ 452.811554][T23458] ? lock_downgrade+0x880/0x880 [ 452.816449][T23458] ? _ion_buffer_destroy+0x110/0x110 [ 452.821742][T23458] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 452.827568][T23458] ? __fget+0x35a/0x550 [ 452.831740][T23458] ? _ion_buffer_destroy+0x110/0x110 [ 452.837115][T23458] do_vfs_ioctl+0xd6e/0x1390 [ 452.841716][T23458] ? ioctl_preallocate+0x210/0x210 [ 452.846826][T23458] ? __fget+0x381/0x550 [ 452.850989][T23458] ? ksys_dup3+0x3e0/0x3e0 [ 452.855408][T23458] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 452.861650][T23458] ? fput_many+0x12c/0x1a0 [ 452.866073][T23458] ? tomoyo_file_ioctl+0x23/0x30 [ 452.871009][T23458] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 452.877250][T23458] ? security_file_ioctl+0x93/0xc0 [ 452.882367][T23458] ksys_ioctl+0xab/0xd0 [ 452.886530][T23458] __x64_sys_ioctl+0x73/0xb0 [ 452.891130][T23458] do_syscall_64+0x103/0x610 [ 452.895728][T23458] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 452.901619][T23458] RIP: 0033:0x458079 [ 452.905516][T23458] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 452.925128][T23458] RSP: 002b:00007fcddbbfbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 452.933723][T23458] RAX: ffffffffffffffda RBX: 00007fcddbbfbc90 RCX: 0000000000458079 [ 452.941706][T23458] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 452.949716][T23458] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 452.957710][T23458] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcddbbfc6d4 [ 452.965701][T23458] R13: 00000000004c082b R14: 00000000004d25a0 R15: 0000000000000004 05:39:15 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x3, 0x4) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 05:39:15 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:39:15 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x80500, 0x40) dup2(r0, r1) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:39:15 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40}, 0x0, 0x8, 0xffffffffffffffff, 0x0) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000000)=""/94, &(0x7f0000000080)=0x5e) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) r2 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) write$P9_RLOPEN(r2, &(0x7f0000000080)={0x18}, 0x18) r3 = inotify_init() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) inotify_add_watch(r3, &(0x7f0000000200)='./file0\x00', 0x80000002) truncate(&(0x7f0000000180)='./file0/bus\x00', 0x6) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) 05:39:15 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x400000}) 05:39:15 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:15 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x4000000000000400, 0x0) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000040)) 05:39:16 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x40000000000000}) 05:39:16 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:16 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0xfffffff5) 05:39:16 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) [ 454.424118][ C1] net_ratelimit: 24 callbacks suppressed [ 454.424127][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 454.438146][ C1] protocol 88fb is buggy, dev hsr_slave_1 05:39:16 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:39:16 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:16 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x181800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009}) 05:39:16 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x80ffff00000000}) 05:39:17 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'nlmon0\x00', 0x202}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x200, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x0, r2}) arch_prctl$ARCH_SET_GS(0x1001, 0x6) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x2000ff, 0x0) read$FUSE(r3, &(0x7f0000004100), 0xffffffffffffff57) 05:39:17 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x80ffff}) 05:39:17 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:17 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7f, 0x40000) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000040)={0x7, 0x4724}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x400000, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bind$ax25(r1, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x4, 0x101000) write$cgroup_type(r1, &(0x7f0000000400)='threaded\x00', 0x9) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000200)={0x100000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x1, 0x4, 0x7fffffff, 0x100000000, 0x4, 0x4}) 05:39:17 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x2, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:39:17 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x5421, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:39:17 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 05:39:17 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000]}}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) 05:39:17 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x5450, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:39:17 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x400000000000000}) 05:39:17 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x5451, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) 05:39:17 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffeffff, 0x1000}], 0x2aaaaaaaaaaaab1f, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x80041, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000780), &(0x7f0000000740)=0x0, &(0x7f0000000480)) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='\x00\x00\x00\x00\x06') r4 = userfaultfd(0x800) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x6}) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r2, 0x0, 0xb, &(0x7f00000002c0)='/dev/audio\x00'}, 0x30) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x10001, 0x0, 0x100, 0x8, 0x0, 0x5d, 0x8004, 0x8, 0x0, 0x3, 0x7fffffff, 0x1000, 0x40, 0x8, 0xc7da, 0x4, 0x9, 0x0, 0xffffffff, 0x2003f, 0xe8c, 0x6f6b1b35, 0x1, 0x80000001, 0x8, 0x7ff, 0x1, 0x3, 0x401, 0x2, 0x0, 0x63f, 0x10000000000000, 0xb418, 0x0, 0x3f, 0x0, 0x997a, 0x4, @perf_config_ext={0x6}, 0x8, 0x4, 0xffff, 0x3, 0x5, 0x2000000, 0xfffffffffffffff8}, r5, 0x4, r0, 0x3) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) r6 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x7, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10c010, r1, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8004700b, &(0x7f00000006c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x6e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x7c, 0x4, 0x80, 0x100000001, 0x2, 0x1]}, 0x5c) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000008c0)={{0xa, 0x4e28, 0x101, @loopback, 0x9fe}, {0xa, 0x4e23, 0x82d, @mcast1, 0x10000}, 0x7, [0x1, 0x7d, 0x0, 0x4, 0x9, 0x1, 0x4, 0x400]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local, 0x1f00}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7, 0x0, 0x0, 0x0, 0x4]}, 0x12) [ 455.625542][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 455.631412][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 455.637340][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 455.643154][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 455.704142][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 455.710113][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 455.716057][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 455.721864][ C0] protocol 88fb is buggy, dev hsr_slave_1 05:39:18 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x5452, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) [ 456.325736][ T1050] BUG: unable to handle kernel paging request at fffff10843ffe200 [ 456.333590][ T1050] #PF error: [normal kernel read fault] [ 456.339141][ T1050] PGD 0 P4D 0 [ 456.342519][ T1050] Oops: 0000 [#1] PREEMPT SMP KASAN [ 456.347814][ T1050] CPU: 1 PID: 1050 Comm: khugepaged Not tainted 5.1.0-rc1+ #29 [ 456.355364][ T1050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 456.365569][ T1050] RIP: 0010:set_pfnblock_flags_mask+0x6c/0x360 [ 456.371737][ T1050] Code: 35 a9 2c d0 08 48 85 f6 0f 84 c6 01 00 00 48 89 d7 48 c1 ef 16 48 8d 1c fe 48 be 00 00 00 00 00 fc ff df 48 89 df 48 c1 ef 03 <80> 3c 37 00 0f 85 8e 02 00 00 4c 8b 33 4d 85 f6 74 0a 83 e0 7f 48 [ 456.391346][ T1050] RSP: 0018:ffff8880a82c70a8 EFLAGS: 00010a06 [ 456.397415][ T1050] RAX: 0001fc0000000002 RBX: ffffa8421fff1000 RCX: 0000000000000003 [ 456.405388][ T1050] RDX: fe00000000014200 RSI: dffffc0000000000 RDI: 1ffff50843ffe200 [ 456.413353][ T1050] RBP: ffff8880a82c70f8 R08: 0000000000000001 R09: ffffed1015d25bc8 [ 456.421322][ T1050] R10: ffffed1015d25bc7 R11: ffff8880ae92de3b R12: 0000000000000001 [ 456.429286][ T1050] R13: 0000000000000001 R14: ffff8880a82c7550 R15: 7fffea0000508000 [ 456.437265][ T1050] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 456.446189][ T1050] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 456.456159][ T1050] CR2: fffff10843ffe200 CR3: 00000000901e9000 CR4: 00000000001406e0 [ 456.464127][ T1050] Call Trace: [ 456.467421][ T1050] ? kasan_check_read+0x11/0x20 [ 456.472269][ T1050] compaction_alloc+0x1b02/0x2290 [ 456.477299][ T1050] ? isolate_freepages_block+0xd40/0xd40 [ 456.483596][ T1050] ? trace_hardirqs_on+0x67/0x230 [ 456.488628][ T1050] migrate_pages+0x484/0x2cd0 [ 456.493313][ T1050] ? __ClearPageMovable+0x250/0x250 [ 456.498503][ T1050] ? isolate_freepages_block+0xd40/0xd40 [ 456.504490][ T1050] compact_zone+0x1b56/0x38d0 [ 456.509174][ T1050] ? compaction_suitable+0x3b0/0x3b0 [ 456.514457][ T1050] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.520690][ T1050] ? debug_smp_processor_id+0x3c/0x280 [ 456.526143][ T1050] compact_zone_order+0x1af/0x2a0 [ 456.531233][ T1050] ? compact_zone+0x38d0/0x38d0 [ 456.536166][ T1050] ? sched_clock+0x2e/0x50 [ 456.540590][ T1050] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 456.546308][ T1050] try_to_compact_pages+0x268/0xaf0 [ 456.551509][ T1050] __alloc_pages_direct_compact+0x154/0x4d0 [ 456.557398][ T1050] ? get_page_from_freelist+0x4170/0x4170 [ 456.563109][ T1050] ? __isolate_free_page+0x4c0/0x4c0 [ 456.568389][ T1050] ? mutex_unlock+0xd/0x10 [ 456.572797][ T1050] ? drain_all_pages+0x408/0x590 [ 456.577734][ T1050] __alloc_pages_slowpath+0xb14/0x28b0 [ 456.583193][ T1050] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.589455][ T1050] ? warn_alloc+0x110/0x110 [ 456.593950][ T1050] ? find_held_lock+0x35/0x130 [ 456.598708][ T1050] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 456.604337][ T1050] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 456.610584][ T1050] ? should_fail+0x1de/0x852 [ 456.615178][ T1050] ? __isolate_free_page+0x4c0/0x4c0 [ 456.620459][ T1050] ? ___might_sleep+0x163/0x280 [ 456.625312][ T1050] __alloc_pages_nodemask+0x57e/0x7e0 [ 456.630679][ T1050] ? find_held_lock+0x35/0x130 [ 456.635440][ T1050] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 456.641151][ T1050] ? ret_from_fork+0x3a/0x50 [ 456.645738][ T1050] ? lock_downgrade+0x880/0x880 [ 456.650587][ T1050] ? find_held_lock+0x35/0x130 [ 456.655350][ T1050] khugepaged_alloc_page+0x96/0x160 [ 456.660549][ T1050] collapse_huge_page+0x130/0x3f60 [ 456.665658][ T1050] ? perf_trace_lock+0xeb/0x510 [ 456.670519][ T1050] ? __lockdep_free_key_range+0x120/0x120 [ 456.676252][ T1050] ? khugepaged+0x289f/0x3f40 [ 456.680930][ T1050] ? __collapse_huge_page_swapin+0xe70/0xe70 [ 456.686903][ T1050] ? kasan_check_write+0x14/0x20 [ 456.691838][ T1050] ? lock_downgrade+0x880/0x880 [ 456.696682][ T1050] ? __pte_alloc_kernel+0x220/0x220 [ 456.701874][ T1050] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.708111][ T1050] ? khugepaged_find_target_node+0x142/0x180 [ 456.714103][ T1050] khugepaged+0x28c3/0x3f40 [ 456.718614][ T1050] ? collapse_huge_page+0x3f60/0x3f60 [ 456.723980][ T1050] ? finish_wait+0x260/0x260 [ 456.728573][ T1050] ? lockdep_hardirqs_on+0x418/0x5d0 [ 456.733851][ T1050] ? trace_hardirqs_on+0x67/0x230 [ 456.738867][ T1050] ? kasan_check_read+0x11/0x20 [ 456.743717][ T1050] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 456.749523][ T1050] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 456.755756][ T1050] ? __kthread_parkme+0xfb/0x1b0 [ 456.760686][ T1050] kthread+0x357/0x430 [ 456.764752][ T1050] ? collapse_huge_page+0x3f60/0x3f60 [ 456.770113][ T1050] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 456.776348][ T1050] ret_from_fork+0x3a/0x50 [ 456.780760][ T1050] Modules linked in: [ 456.784650][ T1050] CR2: fffff10843ffe200 [ 456.788820][ T1050] ---[ end trace 5465243b0014feb9 ]--- [ 456.794278][ T1050] RIP: 0010:set_pfnblock_flags_mask+0x6c/0x360 [ 456.800424][ T1050] Code: 35 a9 2c d0 08 48 85 f6 0f 84 c6 01 00 00 48 89 d7 48 c1 ef 16 48 8d 1c fe 48 be 00 00 00 00 00 fc ff df 48 89 df 48 c1 ef 03 <80> 3c 37 00 0f 85 8e 02 00 00 4c 8b 33 4d 85 f6 74 0a 83 e0 7f 48 [ 456.820038][ T1050] RSP: 0018:ffff8880a82c70a8 EFLAGS: 00010a06 [ 456.826109][ T1050] RAX: 0001fc0000000002 RBX: ffffa8421fff1000 RCX: 0000000000000003 [ 456.834089][ T1050] RDX: fe00000000014200 RSI: dffffc0000000000 RDI: 1ffff50843ffe200 [ 456.842065][ T1050] RBP: ffff8880a82c70f8 R08: 0000000000000001 R09: ffffed1015d25bc8 [ 456.850033][ T1050] R10: ffffed1015d25bc7 R11: ffff8880ae92de3b R12: 0000000000000001 [ 456.858016][ T1050] R13: 0000000000000001 R14: ffff8880a82c7550 R15: 7fffea0000508000 [ 456.865992][ T1050] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 456.874912][ T1050] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 456.881659][ T1050] CR2: fffff10843ffe200 CR3: 00000000901e9000 CR4: 00000000001406e0 [ 456.889707][ T1050] Kernel panic - not syncing: Fatal exception [ 456.896495][ T1050] Kernel Offset: disabled [ 456.900831][ T1050] Rebooting in 86400 seconds..