[   36.924850][   T26] audit: type=1800 audit(1552189163.065:26): pid=7638 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[   36.947416][   T26] audit: type=1800 audit(1552189163.065:27): pid=7638 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[   36.969680][   T26] audit: type=1800 audit(1552189163.065:28): pid=7638 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.
[   37.587965][   T26] audit: type=1800 audit(1552189163.755:29): pid=7638 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.96' (ECDSA) to the list of known hosts.
2019/03/10 03:39:35 fuzzer started
2019/03/10 03:39:38 dialing manager at 10.128.0.26:42787
2019/03/10 03:39:46 syscalls: 1
2019/03/10 03:39:46 code coverage: enabled
2019/03/10 03:39:46 comparison tracing: enabled
2019/03/10 03:39:46 extra coverage: extra coverage is not supported by the kernel
2019/03/10 03:39:46 setuid sandbox: enabled
2019/03/10 03:39:46 namespace sandbox: enabled
2019/03/10 03:39:46 Android sandbox: /sys/fs/selinux/policy does not exist
2019/03/10 03:39:46 fault injection: enabled
2019/03/10 03:39:46 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/03/10 03:39:46 net packet injection: enabled
2019/03/10 03:39:46 net device setup: enabled
03:41:58 executing program 0:
r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r0, 0x11, 0x2070dffc)

syzkaller login: [  192.312594][ T7804] IPVS: ftp: loaded support on port[0] = 21
03:41:58 executing program 1:
r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe)
keyctl$get_security(0x11, r0, &(0x7f00000000c0)=""/224, 0xe0)

[  192.432572][ T7804] chnl_net:caif_netlink_parms(): no params data found
[  192.527368][ T7804] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.535044][ T7804] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.554624][ T7804] device bridge_slave_0 entered promiscuous mode
[  192.575308][ T7804] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.582433][ T7804] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.591227][ T7804] device bridge_slave_1 entered promiscuous mode
[  192.614289][ T7804] bond0: Enslaving bond_slave_0 as an active interface with an up link
03:41:58 executing program 2:
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070")
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x0, @dev, 0x6}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000008c0)=[@in={0x2, 0x4e21, @multicast2}], 0x10)

[  192.624429][ T7804] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  192.638721][ T7807] IPVS: ftp: loaded support on port[0] = 21
[  192.657709][ T7804] team0: Port device team_slave_0 added
[  192.666257][ T7804] team0: Port device team_slave_1 added
[  192.747436][ T7804] device hsr_slave_0 entered promiscuous mode
[  192.784844][ T7804] device hsr_slave_1 entered promiscuous mode
03:41:59 executing program 3:
r0 = memfd_create(&(0x7f0000000140)='md5sumbdev.vmnet1lo\x00', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
mkdir(0x0, 0x0)
chdir(0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
creat(&(0x7f00000000c0)='./file0/../file0\x00', 0x0)

[  192.850581][ T7809] IPVS: ftp: loaded support on port[0] = 21
[  192.869456][ T7804] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.876671][ T7804] bridge0: port 2(bridge_slave_1) entered forwarding state
[  192.884310][ T7804] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.891411][ T7804] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.085258][ T7804] 8021q: adding VLAN 0 to HW filter on device bond0
03:41:59 executing program 4:
lsetxattr$security_smack_transmute(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000680)='TRUE', 0x4, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000700)={'eql\x00', 0xc002})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x408000, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10)
getsockopt$inet6_buf(r2, 0x29, 0x3d, &(0x7f00000006c0)=""/12, &(0x7f0000000340)=0xc)
clone(0x2902001fff, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff)
getrandom(&(0x7f0000001d80)=""/210, 0xd2, 0x3)
rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8)
rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000100))
ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000240)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1})
readv(r0, &(0x7f0000000200)=[{&(0x7f0000000cc0)=""/165, 0xa5}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x2)

[  193.157603][ T7804] 8021q: adding VLAN 0 to HW filter on device team0
[  193.185386][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  193.196786][ T7813] IPVS: ftp: loaded support on port[0] = 21
[  193.209984][ T2993] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.233953][ T2993] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.249365][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  193.301724][ T7814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  193.312395][ T7814] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.319516][ T7814] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.328984][ T7814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  193.338028][ T7814] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.345182][ T7814] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.354877][ T7807] chnl_net:caif_netlink_parms(): no params data found
[  193.382460][ T7809] chnl_net:caif_netlink_parms(): no params data found
[  193.409736][ T7814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  193.424361][ T7814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
03:41:59 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb904021965000b007c06e87c55a11200e1730000000000000000000000000000812fa80005001b4163e3e53db14ca0508ac1799d58f030035c3b61c1d67f6faf7d71341e2cfbe06bbace801705000000e5a7cef4c02631631fb794643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6dd457765c4f8ae2cdefffb798262f3d40fad95667e04adcdf634c1f215ca8076b6383c37b35ce80ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954bff030e9703db0de796ac5abeb3a79dd14678", 0xd8}], 0x1}, 0x0)

[  193.491270][ T7817] IPVS: ftp: loaded support on port[0] = 21
[  193.497551][ T7814] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  193.509555][ T7814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  193.522477][ T7814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  193.534891][ T7814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  193.544053][ T7814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  193.565526][ T7804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  193.597636][ T7807] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.606224][ T7807] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.614101][ T7807] device bridge_slave_0 entered promiscuous mode
[  193.623758][ T7807] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.631745][ T7807] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.639675][ T7807] device bridge_slave_1 entered promiscuous mode
[  193.661188][ T7809] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.669060][ T7809] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.677848][ T7809] device bridge_slave_0 entered promiscuous mode
[  193.712472][ T7804] 8021q: adding VLAN 0 to HW filter on device batadv0
[  193.733805][ T7807] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  193.742290][ T7809] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.749855][ T7809] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.758424][ T7809] device bridge_slave_1 entered promiscuous mode
[  193.779275][ T7809] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  193.795062][ T7807] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  193.834293][ T7809] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  193.891989][ T7820] IPVS: ftp: loaded support on port[0] = 21
[  193.913734][ T7813] chnl_net:caif_netlink_parms(): no params data found
03:42:00 executing program 0:
r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r0, 0x11, 0x2070dffc)

[  193.940519][ T7807] team0: Port device team_slave_0 added
[  193.952023][ T7807] team0: Port device team_slave_1 added
[  193.959023][ T7809] team0: Port device team_slave_0 added
[  193.979282][ T7809] team0: Port device team_slave_1 added
03:42:00 executing program 0:
r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r0, 0x11, 0x2070dffc)

[  194.045487][ T7813] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.052597][ T7813] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.063551][ T7813] device bridge_slave_0 entered promiscuous mode
03:42:00 executing program 0:
r0 = open(&(0x7f00007e2ff8)='./file0\x00', 0x80040, 0x0)
fcntl$setlease(r0, 0x11, 0x2070dffc)

03:42:00 executing program 0:
syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000500)=[{&(0x7f0000000200)="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", 0x101, 0x400}], 0x0, 0x0)

[  194.144063][ T7813] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.151664][ T7813] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.160969][ T7813] device bridge_slave_1 entered promiscuous mode
[  194.193242][ T7837] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[  194.216367][ T7807] device hsr_slave_0 entered promiscuous mode
[  194.243424][ T7837] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[  194.249502][ T7807] device hsr_slave_1 entered promiscuous mode
03:42:00 executing program 0:
syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000500)=[{&(0x7f0000000200)="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", 0x101, 0x400}], 0x0, 0x0)

[  194.321945][ T7844] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[  194.333648][ T7809] device hsr_slave_0 entered promiscuous mode
03:42:00 executing program 0:
syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000500)=[{&(0x7f0000000200)="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", 0x101, 0x400}], 0x0, 0x0)

[  194.365493][ T7809] device hsr_slave_1 entered promiscuous mode
[  194.413839][ T7850] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
03:42:00 executing program 0:
syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000500)=[{&(0x7f0000000200)="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", 0x101, 0x400}], 0x0, 0x0)

[  194.515279][ T7813] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  194.529593][ T7813] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  194.543479][ T7856] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[  194.564684][ T7817] chnl_net:caif_netlink_parms(): no params data found
[  194.672486][ T7813] team0: Port device team_slave_0 added
[  194.712705][ T7813] team0: Port device team_slave_1 added
[  194.749107][ T7807] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.756745][ T7820] chnl_net:caif_netlink_parms(): no params data found
[  194.817000][ T7813] device hsr_slave_0 entered promiscuous mode
[  194.854915][ T7813] device hsr_slave_1 entered promiscuous mode
[  194.929808][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  194.937382][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  194.945666][ T7817] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.952702][ T7817] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.960464][ T7817] device bridge_slave_0 entered promiscuous mode
[  194.969648][ T7817] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.976810][ T7817] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.984310][ T7817] device bridge_slave_1 entered promiscuous mode
[  195.008830][ T7807] 8021q: adding VLAN 0 to HW filter on device team0
[  195.051601][ T7817] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  195.074046][ T7817] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  195.083109][ T7820] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.090718][ T7820] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.098575][ T7820] device bridge_slave_0 entered promiscuous mode
[  195.106534][ T7820] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.113597][ T7820] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.121539][ T7820] device bridge_slave_1 entered promiscuous mode
[  195.149257][ T7817] team0: Port device team_slave_0 added
[  195.157401][ T7809] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.171882][ T7820] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  195.183651][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  195.192285][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  195.200789][   T17] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.207955][   T17] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.221389][ T7817] team0: Port device team_slave_1 added
[  195.245002][ T7820] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  195.254042][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  195.263020][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  195.272363][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  195.280693][ T7819] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.287785][ T7819] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.296282][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  195.312978][ T7809] 8021q: adding VLAN 0 to HW filter on device team0
[  195.366831][ T7817] device hsr_slave_0 entered promiscuous mode
[  195.404981][ T7817] device hsr_slave_1 entered promiscuous mode
[  195.445850][ T7861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  195.454276][ T7861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  195.462754][ T7861] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  195.471032][ T7861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  195.478925][ T7861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  195.486954][ T7861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  195.495562][ T7861] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  195.503958][ T7861] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  195.527043][ T7861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  195.537388][ T7861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  195.547007][ T7861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  195.555806][ T7861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  195.564072][ T7861] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.571143][ T7861] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.580403][ T7861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  195.593980][ T7807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  195.605955][ T7807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  195.614467][ T7820] team0: Port device team_slave_0 added
[  195.621457][ T7820] team0: Port device team_slave_1 added
[  195.636033][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  195.644243][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  195.678147][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  195.686749][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  195.695175][   T17] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.702205][   T17] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.709825][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  195.718971][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  195.766569][ T7820] device hsr_slave_0 entered promiscuous mode
[  195.804884][ T7820] device hsr_slave_1 entered promiscuous mode
[  195.871740][ T7813] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.887784][ T7807] 8021q: adding VLAN 0 to HW filter on device batadv0
[  195.913722][ T7861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  195.922179][ T7861] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  195.932323][ T7861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  195.941076][ T7861] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  195.957001][ T7809] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  195.968507][ T7809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  196.008086][ T7861] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  196.018943][ T7861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  196.044463][ T7861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
03:42:02 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00')
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x0)

[  196.060809][ T7861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  196.070004][ T7861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  196.085641][ T7861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  196.114483][ T7813] 8021q: adding VLAN 0 to HW filter on device team0
[  196.140513][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  196.153566][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  196.166617][ T7868] overlayfs: maximum fs stacking depth exceeded
[  196.184093][ T7817] 8021q: adding VLAN 0 to HW filter on device bond0
[  196.195756][ T7809] 8021q: adding VLAN 0 to HW filter on device batadv0
[  196.207484][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  196.220752][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  196.230047][ T7819] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.237162][ T7819] bridge0: port 1(bridge_slave_0) entered forwarding state
[  196.245220][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  196.253616][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  196.261972][ T7819] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.269063][ T7819] bridge0: port 2(bridge_slave_1) entered forwarding state
[  196.276740][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  196.285537][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  196.293907][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  196.302409][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  196.313220][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  196.321316][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  196.353189][ T7817] 8021q: adding VLAN 0 to HW filter on device team0
[  196.396709][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  196.410760][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  196.420382][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  196.429506][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  196.437832][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  196.447617][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  196.455720][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  196.463866][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  196.481062][ T7813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  196.516980][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  196.526052][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  196.534390][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.541500][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state
[  196.549943][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
03:42:02 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x1, 0x2}, 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100090e000000030000000000000005000600000000000a00000000000004000000000000000000000021e2000000000100000000000002000100012200000000000200fd000005000500000000000a004872bbb6896209000000000000009aec3f3f7710aa000000ff1700400000"], 0x70}}, 0x0)
sendmmsg(r1, &(0x7f0000000180), 0x22e, 0x0)

[  196.582907][ T7820] 8021q: adding VLAN 0 to HW filter on device bond0
[  196.592503][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  196.601316][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  196.623211][ T7819] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.630316][ T7819] bridge0: port 2(bridge_slave_1) entered forwarding state
[  196.642909][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  196.651674][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  196.678146][ T7813] 8021q: adding VLAN 0 to HW filter on device batadv0
[  196.687921][ T7814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  196.696958][ T7814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  196.705904][ T7814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  196.715700][ T7814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  196.724119][ T7814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  196.732432][ T7814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  196.749450][ T7820] 8021q: adding VLAN 0 to HW filter on device team0
[  196.770135][ T7817] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  196.781615][ T7817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  196.793658][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  196.801601][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  196.810743][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  196.820175][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  196.829174][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  196.839011][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.846122][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state
[  196.854714][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  196.862970][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  196.893844][ T7817] 8021q: adding VLAN 0 to HW filter on device batadv0
[  196.923142][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  196.935120][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
03:42:03 executing program 3:
r0 = socket$kcm(0x10, 0x4000000002, 0x10)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e0000002200812de45ae087185082cf0124b0eba06ec4000241000000000013000000000000000051894dd65b2f", 0x2e}], 0x1, 0x0, 0x0, 0xa0010000}, 0x0)

[  196.944456][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  196.953667][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  196.962367][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.969468][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state
[  196.980301][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  196.989460][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  197.013196][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  197.028405][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  197.036335][ T7912] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[  197.040773][ T7910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  197.057941][ T7912] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[  197.061653][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  197.083775][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  197.098436][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  197.106769][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  197.115602][ T7819] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  197.130546][ T7820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  197.154185][ T7820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  197.172729][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  197.182283][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  197.240375][ T7820] 8021q: adding VLAN 0 to HW filter on device batadv0
[  197.315370][    C1] hrtimer: interrupt took 33702 ns
[  197.330558][ T7936] netlink: 'syz-executor.5': attribute type 5 has an invalid length.
03:42:03 executing program 4:
lsetxattr$security_smack_transmute(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000680)='TRUE', 0x4, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000700)={'eql\x00', 0xc002})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x408000, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10)
getsockopt$inet6_buf(r2, 0x29, 0x3d, &(0x7f00000006c0)=""/12, &(0x7f0000000340)=0xc)
clone(0x2902001fff, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff)
getrandom(&(0x7f0000001d80)=""/210, 0xd2, 0x3)
rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8)
rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000100))
ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000240)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1})
readv(r0, &(0x7f0000000200)=[{&(0x7f0000000cc0)=""/165, 0xa5}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x2)

03:42:03 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0xffffff99, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000000c0)={0x0, 0x0}, 0x10)

03:42:03 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00')
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x0)

03:42:03 executing program 3:
r0 = socket$kcm(0x10, 0x4000000002, 0x10)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e0000002200812de45ae087185082cf0124b0eba06ec4000241000000000013000000000000000051894dd65b2f", 0x2e}], 0x1, 0x0, 0x0, 0xa0010000}, 0x0)

03:42:03 executing program 5:
pipe2(0x0, 0x84800)
setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4)
r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x10003, 0x80011, r0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00')
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r1}, 0x10)
writev(r1, &(0x7f0000000080), 0x1a6)
socket(0x0, 0x0, 0x200000000008)
openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)

03:42:03 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x1, 0x2}, 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100090e000000030000000000000005000600000000000a00000000000004000000000000000000000021e2000000000100000000000002000100012200000000000200fd000005000500000000000a004872bbb6896209000000000000009aec3f3f7710aa000000ff1700400000"], 0x70}}, 0x0)
sendmmsg(r1, &(0x7f0000000180), 0x22e, 0x0)

[  197.482424][ T7953] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
03:42:03 executing program 4:
lsetxattr$security_smack_transmute(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000680)='TRUE', 0x4, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000700)={'eql\x00', 0xc002})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x408000, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10)
getsockopt$inet6_buf(r2, 0x29, 0x3d, &(0x7f00000006c0)=""/12, &(0x7f0000000340)=0xc)
clone(0x2902001fff, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff)
getrandom(&(0x7f0000001d80)=""/210, 0xd2, 0x3)
rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8)
rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000100))
ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000240)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1})
readv(r0, &(0x7f0000000200)=[{&(0x7f0000000cc0)=""/165, 0xa5}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x2)

03:42:03 executing program 0:
lsetxattr$security_smack_transmute(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000680)='TRUE', 0x4, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000700)={'eql\x00', 0xc002})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x408000, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10)
getsockopt$inet6_buf(r2, 0x29, 0x3d, &(0x7f00000006c0)=""/12, &(0x7f0000000340)=0xc)
clone(0x2902001fff, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff)
getrandom(&(0x7f0000001d80)=""/210, 0xd2, 0x3)
rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8)
rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000100))
ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000240)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1})
readv(r0, &(0x7f0000000200)=[{&(0x7f0000000cc0)=""/165, 0xa5}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x2)

[  197.542736][ T7951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:42:03 executing program 3:
r0 = socket$kcm(0x10, 0x4000000002, 0x10)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e0000002200812de45ae087185082cf0124b0eba06ec4000241000000000013000000000000000051894dd65b2f", 0x2e}], 0x1, 0x0, 0x0, 0xa0010000}, 0x0)

03:42:03 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00')
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x0)

03:42:03 executing program 4:
lsetxattr$security_smack_transmute(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000680)='TRUE', 0x4, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000700)={'eql\x00', 0xc002})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x408000, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10)
getsockopt$inet6_buf(r2, 0x29, 0x3d, &(0x7f00000006c0)=""/12, &(0x7f0000000340)=0xc)
clone(0x2902001fff, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff)
getrandom(&(0x7f0000001d80)=""/210, 0xd2, 0x3)
rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8)
rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000100))
ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000240)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1})
readv(r0, &(0x7f0000000200)=[{&(0x7f0000000cc0)=""/165, 0xa5}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x2)

[  197.748957][ T7978] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
03:42:04 executing program 4:
lsetxattr$security_smack_transmute(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000680)='TRUE', 0x4, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000700)={'eql\x00', 0xc002})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x408000, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10)
getsockopt$inet6_buf(r2, 0x29, 0x3d, &(0x7f00000006c0)=""/12, &(0x7f0000000340)=0xc)
clone(0x2902001fff, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff)
getrandom(&(0x7f0000001d80)=""/210, 0xd2, 0x3)
rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8)
rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000100))
ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000240)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1})
readv(r0, &(0x7f0000000200)=[{&(0x7f0000000cc0)=""/165, 0xa5}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x2)

[  197.822961][ T7973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:42:04 executing program 5:
pipe2(0x0, 0x84800)
setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4)
r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x10003, 0x80011, r0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00')
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r1}, 0x10)
writev(r1, &(0x7f0000000080), 0x1a6)
socket(0x0, 0x0, 0x200000000008)
openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)

03:42:04 executing program 0:
lsetxattr$security_smack_transmute(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000680)='TRUE', 0x4, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000700)={'eql\x00', 0xc002})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x408000, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10)
getsockopt$inet6_buf(r2, 0x29, 0x3d, &(0x7f00000006c0)=""/12, &(0x7f0000000340)=0xc)
clone(0x2902001fff, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff)
getrandom(&(0x7f0000001d80)=""/210, 0xd2, 0x3)
rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8)
rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000100))
ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000240)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1})
readv(r0, &(0x7f0000000200)=[{&(0x7f0000000cc0)=""/165, 0xa5}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x2)

03:42:04 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00')
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1'])
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x0)

03:42:04 executing program 3:
r0 = socket$kcm(0x10, 0x4000000002, 0x10)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e0000002200812de45ae087185082cf0124b0eba06ec4000241000000000013000000000000000051894dd65b2f", 0x2e}], 0x1, 0x0, 0x0, 0xa0010000}, 0x0)

03:42:04 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x1, 0x2}, 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100090e000000030000000000000005000600000000000a00000000000004000000000000000000000021e2000000000100000000000002000100012200000000000200fd000005000500000000000a004872bbb6896209000000000000009aec3f3f7710aa000000ff1700400000"], 0x70}}, 0x0)
sendmmsg(r1, &(0x7f0000000180), 0x22e, 0x0)

[  198.022134][ T7999] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'.
[  198.068963][ T7998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:42:04 executing program 3:
pipe2(0x0, 0x84800)
setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4)
r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x10003, 0x80011, r0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00')
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r1}, 0x10)
writev(r1, &(0x7f0000000080), 0x1a6)
socket(0x0, 0x0, 0x200000000008)
openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)

03:42:04 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000200))

03:42:04 executing program 5:
pipe2(0x0, 0x84800)
setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4)
r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x10003, 0x80011, r0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00')
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r1}, 0x10)
writev(r1, &(0x7f0000000080), 0x1a6)
socket(0x0, 0x0, 0x200000000008)
openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)

03:42:04 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000200))

03:42:04 executing program 3:
pipe2(0x0, 0x84800)
setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4)
r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x10003, 0x80011, r0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00')
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r1}, 0x10)
writev(r1, &(0x7f0000000080), 0x1a6)
socket(0x0, 0x0, 0x200000000008)
openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)

03:42:04 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000200))

03:42:04 executing program 4:
lsetxattr$security_smack_transmute(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000680)='TRUE', 0x4, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000700)={'eql\x00', 0xc002})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x408000, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10)
getsockopt$inet6_buf(r2, 0x29, 0x3d, &(0x7f00000006c0)=""/12, &(0x7f0000000340)=0xc)
clone(0x2902001fff, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff)
getrandom(&(0x7f0000001d80)=""/210, 0xd2, 0x3)
rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8)
rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000100))
ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000240)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1})
readv(r0, &(0x7f0000000200)=[{&(0x7f0000000cc0)=""/165, 0xa5}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x2)

03:42:04 executing program 5:
pipe2(0x0, 0x84800)
setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4)
r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x10003, 0x80011, r0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00')
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r1}, 0x10)
writev(r1, &(0x7f0000000080), 0x1a6)
socket(0x0, 0x0, 0x200000000008)
openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)

03:42:05 executing program 0:
lsetxattr$security_smack_transmute(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000680)='TRUE', 0x4, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000700)={'eql\x00', 0xc002})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x408000, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10)
getsockopt$inet6_buf(r2, 0x29, 0x3d, &(0x7f00000006c0)=""/12, &(0x7f0000000340)=0xc)
clone(0x2902001fff, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff)
getrandom(&(0x7f0000001d80)=""/210, 0xd2, 0x3)
rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8)
rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000100))
ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000240)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1})
readv(r0, &(0x7f0000000200)=[{&(0x7f0000000cc0)=""/165, 0xa5}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x2)

03:42:05 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000200))

03:42:05 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x1, 0x2}, 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100090e000000030000000000000005000600000000000a00000000000004000000000000000000000021e2000000000100000000000002000100012200000000000200fd000005000500000000000a004872bbb6896209000000000000009aec3f3f7710aa000000ff1700400000"], 0x70}}, 0x0)
sendmmsg(r1, &(0x7f0000000180), 0x22e, 0x0)

03:42:05 executing program 3:
pipe2(0x0, 0x84800)
setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4)
r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x10003, 0x80011, r0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00')
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r1}, 0x10)
writev(r1, &(0x7f0000000080), 0x1a6)
socket(0x0, 0x0, 0x200000000008)
openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)

03:42:05 executing program 5:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f0000000180)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x27}}, &(0x7f0000000480)='GPL\x00\x83\xff\x13\x0f_\xb0\x0e][d\x9b\x18r\xd22CT\xb6\xe2wp\xc5\xa6$\x1e\x8d\xef\xd6S>*\xe1&\xbee\\l\x12cI!l0\xbb\x1f\x80\xfb7\x0e\xc0\xd5\xbe\xe7\x82\xafW\x8d\f<\xc1\x8d\x1e\x8b=+6\xfb\xf4\xe4\xba\xb3\xff\xf4\xcb\x94\xb8N\x91j\xc4\x85F\xd3I\xb7\xbb\xf3\x9a\xf2\r\a*\xd1\x9c\x1d\xe0\xdet+\xad\x10\xb2\xba\xb4\x8fa\x96\xe5-o\xec\x94\x17\x98\xceKF5\xb1\xd1\x1ct\xac\x89j\xa0\xb6\xc3>\xb1U$\xeaC\'\xd2\x98\xd1\xb6(\xba\x00B\xa0\xbc,\xaaI\xb9\xe2`QD\xe7\xbcWX\xb5\x89\x8a\ne\x85\xad\xd0\xd0\x1d\x96\x9a\xf9\xc1\xa5\x9b\x9ce %\xd4\xf1U\x03[\xf4\x92\x8d\xaf\xfe\xd3\xdf\x92>\x81\xdf\xd9\xf74\x1ajS\xfc\x1dn\x02\xad~\xdc\xbea\x02C\x1d\n\x04\x049\xda$\t\x8c\xa2\x9f\xf6\r\x9e\xacp\xd2\x8d~\xa4\x97\x88>\xfdW\xf3U\x96\xd9\x18t\xb2\xfd\xee<\x965\x94n\xbc\b\xc9.\xd6\x94ov\x8e\xaf\x05l\xbc\xa6,\x1c\xa59Q\xa9~\xfc\xa7\x1e\xb53\x9aH\xb4\aqh]m\xb6,\xe3\xc52|J\')7\x10n4\xb3;/N\xf6/\x1c\x1c\x87b\xc1\x89\xf4\xc8{\xe8Ab\xe2\x8e\t\v\xe5\xf6\xfcnQ\v?\xaf\xf2\xd9\xc0\x9d<\b\xd4\xf6\xa1\xe0$\xca\xe6\xffX\xe4\xc3\x1c\x03\x93\xf6X\xb7\xad}\x83\xf7\x1a=\xb0\xe3\xc6', 0x400000000001, 0x99, &(0x7f0000000600)=""/153}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x200000000000000, 0xe, 0x0, &(0x7f0000000040)="450624ec0ebced423db46ebbfd1b", 0x0}, 0x28)

03:42:05 executing program 4:
lsetxattr$security_smack_transmute(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000680)='TRUE', 0x4, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000700)={'eql\x00', 0xc002})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x408000, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10)
getsockopt$inet6_buf(r2, 0x29, 0x3d, &(0x7f00000006c0)=""/12, &(0x7f0000000340)=0xc)
clone(0x2902001fff, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff)
getrandom(&(0x7f0000001d80)=""/210, 0xd2, 0x3)
rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8)
rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f0000000100))
ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000240)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1})
readv(r0, &(0x7f0000000200)=[{&(0x7f0000000cc0)=""/165, 0xa5}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x2)

03:42:05 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070")
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x14, 0x4, 0x4, 0x7, 0x14}, 0x2c)

03:42:05 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2)
ioctl$TIOCSSOFTCAR(r0, 0x5437, 0x0)

03:42:05 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000480)='/dev/video#\x00', 0x100000007fffffff, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x0, 0x1, 0x2})

03:42:05 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2)
ioctl$TIOCSSOFTCAR(r0, 0x5437, 0x0)

03:42:05 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x7b, 0x0, [0x0, 0x0, 0x40000108]})

03:42:05 executing program 5:
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xf433, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0xe, 0x9}}}}}, &(0x7f0000000000)={0x0, 0x2, [0x0, 0x1000000]})

03:42:05 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x1000000000004)
socket$vsock_dgram(0x28, 0x2, 0x0)
writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1)
recvmmsg(r0, &(0x7f0000003040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

03:42:05 executing program 3:
r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$update(0x2, r0, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0)
r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f0000000600)="63bbdf5b932bb04481028798fd5fb1bf7183b30984e21c3eb3094d70650ee8624e2bdce1427bd61c8e222dbd67d402b7ccaf0c5dc50030ee14d419fa9c84b0ffd1019f1b2ae022a0f182301f9942566e6f61eabe384c732d0813a18bb3dc9f3a678d9d44e6293e786ab2e6d28f236c138d63fe4f6ece6f3d04", 0x79, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0)

03:42:05 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080))

03:42:05 executing program 5:
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xf433, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0xe, 0x9}}}}}, &(0x7f0000000000)={0x0, 0x2, [0x0, 0x1000000]})

03:42:05 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2)
ioctl$TIOCSSOFTCAR(r0, 0x5437, 0x0)

03:42:05 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
fcntl$dupfd(r0, 0x0, r0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x1)
dup3(r1, r0, 0x0)
write(r0, &(0x7f0000c34fff), 0xffffff0b)
poll(&(0x7f0000000080)=[{r1}], 0x1, 0x0)

03:42:05 executing program 5:
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xf433, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0xe, 0x9}}}}}, &(0x7f0000000000)={0x0, 0x2, [0x0, 0x1000000]})

03:42:05 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30)
r1 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x0, 0xbbaee3c0434f2b9a)
write$tun(r1, &(0x7f0000000400)={@val, @val={0x0, 0x80, 0x0, 0x0, 0x0, 0xffffffc000000000}, @ipv4={{0x5, 0x4, 0x401, 0x126b9681, 0x24, 0x68, 0x7, 0xffff, 0x0, 0x0, @loopback, @multicast2}, @dccp={{0x4e24, 0x0, 0x4, 0x1, 0xfffffffffffffffb, 0x0, 0x0, 0xa, 0x0, "95ef1c", 0x80, "9898aa"}}}}, 0x32)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='yeah\x00', 0x5)
bind$inet(r2, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x66, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

03:42:05 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2)
ioctl$TIOCSSOFTCAR(r0, 0x5437, 0x0)

03:42:05 executing program 0:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0)
setresuid(0x0, 0xee01, 0x0)
llistxattr(&(0x7f0000000480)='./file0\x00', 0x0, 0x730c876bb9a991e3)

03:42:05 executing program 5:
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xf433, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0xe, 0x9}}}}}, &(0x7f0000000000)={0x0, 0x2, [0x0, 0x1000000]})

03:42:05 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x13, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0)

[  199.875740][ T8136] (unnamed net_device) (uninitialized): option lp_interval: invalid value (18446744073709551615)
03:42:06 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000cd"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  199.958370][ T8136] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  199.990651][ T8140] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details.
03:42:06 executing program 3:
r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$update(0x2, r0, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0)
r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f0000000600)="63bbdf5b932bb04481028798fd5fb1bf7183b30984e21c3eb3094d70650ee8624e2bdce1427bd61c8e222dbd67d402b7ccaf0c5dc50030ee14d419fa9c84b0ffd1019f1b2ae022a0f182301f9942566e6f61eabe384c732d0813a18bb3dc9f3a678d9d44e6293e786ab2e6d28f236c138d63fe4f6ece6f3d04", 0x79, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0)

03:42:06 executing program 1:
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000400)='/dev/md0\x00', 0x0, 0x0)
ioctl$BLKPG(r0, 0x922, 0x0)

03:42:06 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x13, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0)

03:42:06 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000cd"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:42:06 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ustat(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0)
bind$unix(r0, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
socket$nl_crypto(0x10, 0x3, 0x15)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/.yz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000180), 0x12)
setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='trusted.overlay.upper\x00', 0x0, 0x0, 0x1)
mkdirat(0xffffffffffffffff, 0x0, 0xc0)

03:42:06 executing program 1:
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000400)='/dev/md0\x00', 0x0, 0x0)
ioctl$BLKPG(r0, 0x922, 0x0)

[  200.408346][ T8152] (unnamed net_device) (uninitialized): option lp_interval: invalid value (18446744073709551615)
[  200.434669][ T8152] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
03:42:07 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30)
r1 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x0, 0xbbaee3c0434f2b9a)
write$tun(r1, &(0x7f0000000400)={@val, @val={0x0, 0x80, 0x0, 0x0, 0x0, 0xffffffc000000000}, @ipv4={{0x5, 0x4, 0x401, 0x126b9681, 0x24, 0x68, 0x7, 0xffff, 0x0, 0x0, @loopback, @multicast2}, @dccp={{0x4e24, 0x0, 0x4, 0x1, 0xfffffffffffffffb, 0x0, 0x0, 0xa, 0x0, "95ef1c", 0x80, "9898aa"}}}}, 0x32)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='yeah\x00', 0x5)
bind$inet(r2, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x66, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

03:42:07 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x13, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0)

03:42:07 executing program 1:
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000400)='/dev/md0\x00', 0x0, 0x0)
ioctl$BLKPG(r0, 0x922, 0x0)

03:42:07 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000cd"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

03:42:07 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ustat(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0)
bind$unix(r0, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
socket$nl_crypto(0x10, 0x3, 0x15)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/.yz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000180), 0x12)
setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='trusted.overlay.upper\x00', 0x0, 0x0, 0x1)
mkdirat(0xffffffffffffffff, 0x0, 0xc0)

[  200.879948][ T8176] (unnamed net_device) (uninitialized): option lp_interval: invalid value (18446744073709551615)
03:42:07 executing program 1:
r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000400)='/dev/md0\x00', 0x0, 0x0)
ioctl$BLKPG(r0, 0x922, 0x0)

[  200.939066][ T8176] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
03:42:07 executing program 3:
r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$update(0x2, r0, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0)
r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f0000000600)="63bbdf5b932bb04481028798fd5fb1bf7183b30984e21c3eb3094d70650ee8624e2bdce1427bd61c8e222dbd67d402b7ccaf0c5dc50030ee14d419fa9c84b0ffd1019f1b2ae022a0f182301f9942566e6f61eabe384c732d0813a18bb3dc9f3a678d9d44e6293e786ab2e6d28f236c138d63fe4f6ece6f3d04", 0x79, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0)

03:42:07 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ustat(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0)
bind$unix(r0, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
socket$nl_crypto(0x10, 0x3, 0x15)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/.yz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000180), 0x12)
setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='trusted.overlay.upper\x00', 0x0, 0x0, 0x1)
mkdirat(0xffffffffffffffff, 0x0, 0xc0)

03:42:07 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30)
r1 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x0, 0xbbaee3c0434f2b9a)
write$tun(r1, &(0x7f0000000400)={@val, @val={0x0, 0x80, 0x0, 0x0, 0x0, 0xffffffc000000000}, @ipv4={{0x5, 0x4, 0x401, 0x126b9681, 0x24, 0x68, 0x7, 0xffff, 0x0, 0x0, @loopback, @multicast2}, @dccp={{0x4e24, 0x0, 0x4, 0x1, 0xfffffffffffffffb, 0x0, 0x0, 0xa, 0x0, "95ef1c", 0x80, "9898aa"}}}}, 0x32)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='yeah\x00', 0x5)
bind$inet(r2, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x66, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

03:42:07 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x13, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0)

03:42:07 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000cd"])
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  201.353747][ T8194] (unnamed net_device) (uninitialized): option lp_interval: invalid value (18446744073709551615)
[  201.398213][ T8194] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
03:42:07 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ustat(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0)
bind$unix(r0, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
socket$nl_crypto(0x10, 0x3, 0x15)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/.yz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000180), 0x12)
setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='trusted.overlay.upper\x00', 0x0, 0x0, 0x1)
mkdirat(0xffffffffffffffff, 0x0, 0xc0)

03:42:07 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30)
r1 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x0, 0xbbaee3c0434f2b9a)
write$tun(r1, &(0x7f0000000400)={@val, @val={0x0, 0x80, 0x0, 0x0, 0x0, 0xffffffc000000000}, @ipv4={{0x5, 0x4, 0x401, 0x126b9681, 0x24, 0x68, 0x7, 0xffff, 0x0, 0x0, @loopback, @multicast2}, @dccp={{0x4e24, 0x0, 0x4, 0x1, 0xfffffffffffffffb, 0x0, 0x0, 0xa, 0x0, "95ef1c", 0x80, "9898aa"}}}}, 0x32)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='yeah\x00', 0x5)
bind$inet(r2, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x66, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

03:42:07 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ustat(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0)
bind$unix(r0, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
socket$nl_crypto(0x10, 0x3, 0x15)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/.yz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000180), 0x12)
setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='trusted.overlay.upper\x00', 0x0, 0x0, 0x1)
mkdirat(0xffffffffffffffff, 0x0, 0xc0)

03:42:07 executing program 0:
r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$update(0x2, r0, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0)
r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f0000000600)="63bbdf5b932bb04481028798fd5fb1bf7183b30984e21c3eb3094d70650ee8624e2bdce1427bd61c8e222dbd67d402b7ccaf0c5dc50030ee14d419fa9c84b0ffd1019f1b2ae022a0f182301f9942566e6f61eabe384c732d0813a18bb3dc9f3a678d9d44e6293e786ab2e6d28f236c138d63fe4f6ece6f3d04", 0x79, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0)

03:42:07 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x40)
ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000040))
sendto(r0, &(0x7f0000000340)="120000001200e7ef007b00005380a79a9e58", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000020c0), 0x334, 0x0, &(0x7f0000003700)={0x77359400})
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, 0x0)

03:42:08 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x81000008912, &(0x7f0000000100)="0adc1f123c40a41d88b070")
syz_emit_ethernet(0x300b22, &(0x7f0000000080)={@local, @empty, [], {@arp={0x8100, @ether_ipv4={0xf000, 0x800, 0x6, 0x4, 0x0, @local, @dev, @dev}}}}, 0x0)

03:42:08 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ustat(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0)
bind$unix(r0, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
socket$nl_crypto(0x10, 0x3, 0x15)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/.yz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000180), 0x12)
setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='trusted.overlay.upper\x00', 0x0, 0x0, 0x1)
mkdirat(0xffffffffffffffff, 0x0, 0xc0)

03:42:08 executing program 4:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write$P9_RREMOVE(r1, &(0x7f0000000280), 0xff7f)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r2, 0x2081fc)
r3 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0)
fcntl$setstatus(r3, 0x4, 0x40400)
write$FUSE_WRITE(r3, &(0x7f0000000080)={0x18}, 0x18)
fdatasync(r1)
write$binfmt_aout(r0, &(0x7f0000000740)=ANY=[@ANYBLOB='\x00'], 0x1)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1})

03:42:08 executing program 3:
r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$update(0x2, r0, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0)
r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f0000000600)="63bbdf5b932bb04481028798fd5fb1bf7183b30984e21c3eb3094d70650ee8624e2bdce1427bd61c8e222dbd67d402b7ccaf0c5dc50030ee14d419fa9c84b0ffd1019f1b2ae022a0f182301f9942566e6f61eabe384c732d0813a18bb3dc9f3a678d9d44e6293e786ab2e6d28f236c138d63fe4f6ece6f3d04", 0x79, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0)

03:42:08 executing program 5:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ustat(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0)
bind$unix(r0, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
socket$nl_crypto(0x10, 0x3, 0x15)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/.yz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000180), 0x12)
setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='trusted.overlay.upper\x00', 0x0, 0x0, 0x1)
mkdirat(0xffffffffffffffff, 0x0, 0xc0)

03:42:08 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30)
r1 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x0, 0xbbaee3c0434f2b9a)
write$tun(r1, &(0x7f0000000400)={@val, @val={0x0, 0x80, 0x0, 0x0, 0x0, 0xffffffc000000000}, @ipv4={{0x5, 0x4, 0x401, 0x126b9681, 0x24, 0x68, 0x7, 0xffff, 0x0, 0x0, @loopback, @multicast2}, @dccp={{0x4e24, 0x0, 0x4, 0x1, 0xfffffffffffffffb, 0x0, 0x0, 0xa, 0x0, "95ef1c", 0x80, "9898aa"}}}}, 0x32)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='yeah\x00', 0x5)
bind$inet(r2, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x66, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

03:42:08 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2)
write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exec\x00\x00'], 0x1)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x2}, 0x10)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080))
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0)
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
ioctl$VT_DISALLOCATE(r3, 0x5608)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'team0\x00'})
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000001400)={'nat\x00', 0x0, 0x0, 0x0, [], 0x4, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, &(0x7f0000000200))

03:42:08 executing program 4:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write$P9_RREMOVE(r1, &(0x7f0000000280), 0xff7f)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r2, 0x2081fc)
r3 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0)
fcntl$setstatus(r3, 0x4, 0x40400)
write$FUSE_WRITE(r3, &(0x7f0000000080)={0x18}, 0x18)
fdatasync(r1)
write$binfmt_aout(r0, &(0x7f0000000740)=ANY=[@ANYBLOB='\x00'], 0x1)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1})

03:42:08 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30)
r1 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x0, 0xbbaee3c0434f2b9a)
write$tun(r1, &(0x7f0000000400)={@val, @val={0x0, 0x80, 0x0, 0x0, 0x0, 0xffffffc000000000}, @ipv4={{0x5, 0x4, 0x401, 0x126b9681, 0x24, 0x68, 0x7, 0xffff, 0x0, 0x0, @loopback, @multicast2}, @dccp={{0x4e24, 0x0, 0x4, 0x1, 0xfffffffffffffffb, 0x0, 0x0, 0xa, 0x0, "95ef1c", 0x80, "9898aa"}}}}, 0x32)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='yeah\x00', 0x5)
bind$inet(r2, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x66, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

03:42:08 executing program 4:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write$P9_RREMOVE(r1, &(0x7f0000000280), 0xff7f)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r2, 0x2081fc)
r3 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0)
fcntl$setstatus(r3, 0x4, 0x40400)
write$FUSE_WRITE(r3, &(0x7f0000000080)={0x18}, 0x18)
fdatasync(r1)
write$binfmt_aout(r0, &(0x7f0000000740)=ANY=[@ANYBLOB='\x00'], 0x1)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1})

03:42:09 executing program 0:
r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$update(0x2, r0, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0)
r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f0000000600)="63bbdf5b932bb04481028798fd5fb1bf7183b30984e21c3eb3094d70650ee8624e2bdce1427bd61c8e222dbd67d402b7ccaf0c5dc50030ee14d419fa9c84b0ffd1019f1b2ae022a0f182301f9942566e6f61eabe384c732d0813a18bb3dc9f3a678d9d44e6293e786ab2e6d28f236c138d63fe4f6ece6f3d04", 0x79, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0)

03:42:09 executing program 4:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write$P9_RREMOVE(r1, &(0x7f0000000280), 0xff7f)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r2, 0x2081fc)
r3 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0)
fcntl$setstatus(r3, 0x4, 0x40400)
write$FUSE_WRITE(r3, &(0x7f0000000080)={0x18}, 0x18)
fdatasync(r1)
write$binfmt_aout(r0, &(0x7f0000000740)=ANY=[@ANYBLOB='\x00'], 0x1)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1})

03:42:09 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30)
r1 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x0, 0xbbaee3c0434f2b9a)
write$tun(r1, &(0x7f0000000400)={@val, @val={0x0, 0x80, 0x0, 0x0, 0x0, 0xffffffc000000000}, @ipv4={{0x5, 0x4, 0x401, 0x126b9681, 0x24, 0x68, 0x7, 0xffff, 0x0, 0x0, @loopback, @multicast2}, @dccp={{0x4e24, 0x0, 0x4, 0x1, 0xfffffffffffffffb, 0x0, 0x0, 0xa, 0x0, "95ef1c", 0x80, "9898aa"}}}}, 0x32)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='yeah\x00', 0x5)
bind$inet(r2, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x66, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

03:42:09 executing program 4:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getitimer(0x1, &(0x7f00000000c0))

03:42:09 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2)
write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exec\x00\x00'], 0x1)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x2}, 0x10)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080))
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0)
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
ioctl$VT_DISALLOCATE(r3, 0x5608)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'team0\x00'})
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000001400)={'nat\x00', 0x0, 0x0, 0x0, [], 0x4, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, &(0x7f0000000200))

03:42:09 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2)
write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exec\x00\x00'], 0x1)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x2}, 0x10)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080))
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0)
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
ioctl$VT_DISALLOCATE(r3, 0x5608)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'team0\x00'})
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000001400)={'nat\x00', 0x0, 0x0, 0x0, [], 0x4, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, &(0x7f0000000200))

03:42:09 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2)
write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exec\x00\x00'], 0x1)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x2}, 0x10)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080))
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0)
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
ioctl$VT_DISALLOCATE(r3, 0x5608)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'team0\x00'})
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000001400)={'nat\x00', 0x0, 0x0, 0x0, [], 0x4, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, &(0x7f0000000200))

03:42:09 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2)
write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exec\x00\x00'], 0x1)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x2}, 0x10)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080))
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0)
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
ioctl$VT_DISALLOCATE(r3, 0x5608)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'team0\x00'})
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000001400)={'nat\x00', 0x0, 0x0, 0x0, [], 0x4, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, &(0x7f0000000200))

03:42:09 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2)
write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exec\x00\x00'], 0x1)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x2}, 0x10)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080))
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0)
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
ioctl$VT_DISALLOCATE(r3, 0x5608)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'team0\x00'})
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000001400)={'nat\x00', 0x0, 0x0, 0x0, [], 0x4, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, &(0x7f0000000200))

03:42:10 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2)
write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exec\x00\x00'], 0x1)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x2}, 0x10)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080))
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0)
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
ioctl$VT_DISALLOCATE(r3, 0x5608)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'team0\x00'})
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000001400)={'nat\x00', 0x0, 0x0, 0x0, [], 0x4, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, &(0x7f0000000200))

03:42:10 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2)
write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exec\x00\x00'], 0x1)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x2}, 0x10)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080))
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0)
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
ioctl$VT_DISALLOCATE(r3, 0x5608)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'team0\x00'})
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000001400)={'nat\x00', 0x0, 0x0, 0x0, [], 0x4, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, &(0x7f0000000200))

03:42:10 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2)
write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exec\x00\x00'], 0x1)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x2}, 0x10)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080))
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0)
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
ioctl$VT_DISALLOCATE(r3, 0x5608)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'team0\x00'})
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000001400)={'nat\x00', 0x0, 0x0, 0x0, [], 0x4, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, &(0x7f0000000200))

03:42:10 executing program 0:
r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$update(0x2, r0, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0)
r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000540)={'syz'}, &(0x7f0000000600)="63bbdf5b932bb04481028798fd5fb1bf7183b30984e21c3eb3094d70650ee8624e2bdce1427bd61c8e222dbd67d402b7ccaf0c5dc50030ee14d419fa9c84b0ffd1019f1b2ae022a0f182301f9942566e6f61eabe384c732d0813a18bb3dc9f3a678d9d44e6293e786ab2e6d28f236c138d63fe4f6ece6f3d04", 0x79, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4a3, 0x0)

03:42:10 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2)
write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exec\x00\x00'], 0x1)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x2}, 0x10)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080))
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0)
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
ioctl$VT_DISALLOCATE(r3, 0x5608)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'team0\x00'})
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000001400)={'nat\x00', 0x0, 0x0, 0x0, [], 0x4, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, &(0x7f0000000200))

03:42:10 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x9)
setresuid(0x0, 0xfffe, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000080)={@local}, 0x20)

03:42:10 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2)
write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exec\x00\x00'], 0x1)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x2}, 0x10)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080))
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0)
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
ioctl$VT_DISALLOCATE(r3, 0x5608)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'team0\x00'})
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000001400)={'nat\x00', 0x0, 0x0, 0x0, [], 0x4, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, &(0x7f0000000200))

03:42:10 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af10, &(0x7f0000000080))

03:42:10 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1bf, 0x0)

03:42:10 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2)
write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exec\x00\x00'], 0x1)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x2}, 0x10)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080))
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0)
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
ioctl$VT_DISALLOCATE(r3, 0x5608)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'team0\x00'})
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000001400)={'nat\x00', 0x0, 0x0, 0x0, [], 0x4, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, &(0x7f0000000200))

03:42:10 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00\x84\xe0\xda\x82a\xbe\x18O\x17\x1b\\\x143\x06v\x9b=>\xc1\xd9\x06\x00\x05\xf7\xae\xce\xbeA,j5\xac\xf5\xf0&\xc5$\x951QC\x87\x9f\xe0};\xac\xb7k>0\xce\xcd~\xd766*\fo=Cg&[\x8b\xe2\xbd\xe9\x16\xc6\x1e\x97e]\xb0\xed\xe7I\x18\x96RS\x10\x8cyr\xb7\xcf', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x77ac45af)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r1, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000100))

03:42:10 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1bf, 0x0)

03:42:10 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x1fc, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2)
write$apparmor_exec(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='exec\x00\x00'], 0x1)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x2}, 0x10)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080))
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0)
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
ioctl$VT_DISALLOCATE(r3, 0x5608)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'team0\x00'})
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000001400)={'nat\x00', 0x0, 0x0, 0x0, [], 0x4, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, &(0x7f0000000200))

03:42:10 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1bf, 0x0)

03:42:11 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1bf, 0x0)

03:42:11 executing program 2:
syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, 0x0)
mount$9p_rdma(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000001080)='9p\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x46}}, &(0x7f0000000240)='GPL\x00\x83\xff\x13\x0f_\xb0\x0e][dCT\xb6\xe2wp\xc5\xa6$\x1e\x8d\xef\xd6S>*\xe1\x06\xbee\\lRcI!l0\xbb\x1f\x80\xfbE\x0e\xc0\xd5\xbe', 0x1, 0x99, &(0x7f0000000440)=""/153}, 0x78)

03:42:11 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03, 0x1, 0x40000083]})

03:42:11 executing program 5:
syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x7, 0x200000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x60000, 0x4401)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc)

03:42:11 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20)

03:42:11 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0'}, 0xb)
write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x3ff800)

03:42:11 executing program 0:
r0 = socket(0x100000400000010, 0x2, 0x0)
write(r0, &(0x7f0000000180)="2400000052001f0014f97407010904000200071008000100230200000800000000000000", 0x24)

03:42:11 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03, 0x1, 0x40000083]})

03:42:11 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/.yz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x0)
unlinkat(r0, &(0x7f00000002c0)='./file0\x00', 0x200)

03:42:11 executing program 2:
syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, 0x0)
mount$9p_rdma(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000001080)='9p\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x46}}, &(0x7f0000000240)='GPL\x00\x83\xff\x13\x0f_\xb0\x0e][dCT\xb6\xe2wp\xc5\xa6$\x1e\x8d\xef\xd6S>*\xe1\x06\xbee\\lRcI!l0\xbb\x1f\x80\xfbE\x0e\xc0\xd5\xbe', 0x1, 0x99, &(0x7f0000000440)=""/153}, 0x78)

03:42:11 executing program 5:
syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x7, 0x200000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x60000, 0x4401)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc)

03:42:11 executing program 1:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x0, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, &(0x7f0000000440)=ANY=[@ANYBLOB='gid=', @ANYRESDEC=0x0])

03:42:11 executing program 0:
r0 = socket(0x100000400000010, 0x2, 0x0)
write(r0, &(0x7f0000000180)="2400000052001f0014f97407010904000200071008000100230200000800000000000000", 0x24)

03:42:11 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03, 0x1, 0x40000083]})

03:42:11 executing program 0:
r0 = socket(0x100000400000010, 0x2, 0x0)
write(r0, &(0x7f0000000180)="2400000052001f0014f97407010904000200071008000100230200000800000000000000", 0x24)

03:42:11 executing program 3:
mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffffff", 0x5)

03:42:11 executing program 1:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
dup3(r2, r1, 0x0)

03:42:11 executing program 2:
syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, 0x0)
mount$9p_rdma(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000001080)='9p\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x46}}, &(0x7f0000000240)='GPL\x00\x83\xff\x13\x0f_\xb0\x0e][dCT\xb6\xe2wp\xc5\xa6$\x1e\x8d\xef\xd6S>*\xe1\x06\xbee\\lRcI!l0\xbb\x1f\x80\xfbE\x0e\xc0\xd5\xbe', 0x1, 0x99, &(0x7f0000000440)=""/153}, 0x78)

03:42:12 executing program 0:
r0 = socket(0x100000400000010, 0x2, 0x0)
write(r0, &(0x7f0000000180)="2400000052001f0014f97407010904000200071008000100230200000800000000000000", 0x24)

03:42:12 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03, 0x1, 0x40000083]})

03:42:12 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000000)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = accept4(0xffffffffffffffff, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x0, 0x0, 0x0)
pkey_alloc(0x0, 0x2)
syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00')
r3 = dup2(r1, r0)
syz_open_dev$video4linux(0x0, 0x0, 0x28000)
write$cgroup_pid(r3, &(0x7f0000000380), 0x12)

03:42:12 executing program 5:
syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x7, 0x200000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x60000, 0x4401)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc)

03:42:12 executing program 2:
syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, 0x0)
mount$9p_rdma(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000001080)='9p\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x3, &(0x7f0000000040)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x46}}, &(0x7f0000000240)='GPL\x00\x83\xff\x13\x0f_\xb0\x0e][dCT\xb6\xe2wp\xc5\xa6$\x1e\x8d\xef\xd6S>*\xe1\x06\xbee\\lRcI!l0\xbb\x1f\x80\xfbE\x0e\xc0\xd5\xbe', 0x1, 0x99, &(0x7f0000000440)=""/153}, 0x78)

03:42:12 executing program 1:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
dup3(r2, r1, 0x0)

03:42:12 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
dup3(r2, r1, 0x0)

03:42:12 executing program 4:
r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000002140)="004dde0301b3d8a52150dbf7f3649aa4a133b1b47392870e2defc66e389f1912e8d05566b4faa7040cc60d103d385210cae9cc0804628a83533410d5996991644a3fe726a1063c39e41d570890b0d9256e0b19698ef7213a67bcfc7af200080000f071991224ad9524b280b9fa224a833ea0cc3c5a51d5d20acd5aa3a5926c8079170000000000000000000000000054db45165107b9c877a83a6bfaf6f33a59150445c45cc59c3a967d69bd8ecb5724a39784673c37c977e61cc6b3e20cd4f9", 0xc0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000001c0)="bc", 0x1, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000440)={r1, r0, r0}, &(0x7f0000000240)=""/92, 0x5c, &(0x7f0000000200)={&(0x7f0000000100)={'sha512-generic\x00'}})

03:42:12 executing program 5:
syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x7, 0x200000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usb(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x60000, 0x4401)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc)

03:42:12 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
dup3(r2, r1, 0x0)

[  206.264957][    C0] ==================================================================
[  206.273215][    C0] BUG: KASAN: use-after-free in ccid_hc_tx_delete+0xde/0x100
[  206.280658][    C0] Read of size 8 at addr ffff8880a9a09640 by task ksoftirqd/0/9
[  206.288275][    C0] 
[  206.290622][    C0] CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 5.0.0+ #15
[  206.297636][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  206.307687][    C0] Call Trace:
[  206.310983][    C0]  dump_stack+0x172/0x1f0
03:42:12 executing program 4:
r0 = semget$private(0x0, 0x20000000105, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0x2}, {}], 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
semop(r0, &(0x7f0000000140)=[{0x0, 0xffff}, {0x0, 0x6}], 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
semop(r0, &(0x7f0000000000)=[{0x0, 0x7}], 0x1)

[  206.315349][    C0]  ? ccid_hc_tx_delete+0xde/0x100
[  206.320381][    C0]  print_address_description.cold+0x7c/0x20d
[  206.326354][    C0]  ? ccid_hc_tx_delete+0xde/0x100
[  206.326375][    C0]  ? ccid_hc_tx_delete+0xde/0x100
[  206.326391][    C0]  kasan_report.cold+0x1b/0x40
[  206.326406][    C0]  ? ccid_hc_tx_delete+0xde/0x100
[  206.326425][    C0]  __asan_report_load8_noabort+0x14/0x20
[  206.326437][    C0]  ccid_hc_tx_delete+0xde/0x100
[  206.326450][    C0]  dccp_sk_destruct+0x3f/0x90
[  206.326459][    C0]  ? dccp_init_sock+0x3f0/0x3f0
[  206.326471][    C0]  __sk_destruct+0x55/0x6d0
[  206.326481][    C0]  ? proto_unregister+0x4e0/0x4e0
[  206.326507][    C0]  rcu_core+0x928/0x1390
[  206.326527][    C0]  ? rcu_check_gp_start_stall+0x250/0x250
[  206.356868][    C0]  ? sched_clock+0x2e/0x50
[  206.356904][    C0]  __do_softirq+0x266/0x95a
[  206.385845][    C0]  ? __sched_text_start+0x8/0x8
[  206.385870][    C0]  ? takeover_tasklets+0x7b0/0x7b0
[  206.385884][    C0]  run_ksoftirqd+0x8e/0x110
[  206.385897][    C0]  smpboot_thread_fn+0x6ab/0xa10
[  206.385912][    C0]  ? sort_range+0x30/0x30
[  206.385946][    C0]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  206.424722][    C0]  ? __kthread_parkme+0xfb/0x1b0
[  206.424740][    C0]  kthread+0x357/0x430
[  206.424752][    C0]  ? sort_range+0x30/0x30
[  206.424765][    C0]  ? kthread_cancel_delayed_work_sync+0x20/0x20
[  206.424780][    C0]  ret_from_fork+0x3a/0x50
[  206.424799][    C0] 
[  206.424805][    C0] Allocated by task 8423:
[  206.424843][    C0]  save_stack+0x45/0xd0
[  206.433826][    C0]  __kasan_kmalloc.constprop.0+0xcf/0xe0
03:42:12 executing program 0:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
dup3(r2, r1, 0x0)

[  206.433845][    C0]  kasan_slab_alloc+0xf/0x20
[  206.433858][    C0]  kmem_cache_alloc+0x11a/0x6f0
[  206.433870][    C0]  ccid_new+0x256/0x3f0
[  206.433881][    C0]  dccp_hdlr_ccid+0x27/0x150
[  206.433900][    C0]  __dccp_feat_activate+0x17a/0x270
[  206.488541][    C0]  dccp_feat_activate_values+0x33a/0x766
[  206.494175][    C0]  dccp_rcv_state_process+0x116f/0x1935
[  206.499735][    C0]  dccp_v6_do_rcv+0x269/0xbf0
[  206.504410][    C0]  __release_sock+0x12e/0x3a0
[  206.509083][    C0]  release_sock+0x59/0x1c0
[  206.513511][    C0]  __inet_stream_connect+0x59f/0xea0
[  206.520191][    C0]  inet_stream_connect+0x58/0xa0
[  206.525124][    C0]  __sys_connect+0x266/0x330
[  206.529723][    C0]  __x64_sys_connect+0x73/0xb0
[  206.529737][    C0]  do_syscall_64+0x103/0x610
[  206.529748][    C0]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  206.529751][    C0] 
[  206.529757][    C0] Freed by task 8423:
[  206.529768][    C0]  save_stack+0x45/0xd0
[  206.529800][    C0]  __kasan_slab_free+0x102/0x150
[  206.539124][    C0]  kasan_slab_free+0xe/0x10
03:42:12 executing program 1:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
dup3(r2, r1, 0x0)

03:42:12 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x20000000)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = accept4(0xffffffffffffffff, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x0, 0x0, 0x0)
pkey_alloc(0x0, 0x2)
syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00')
r3 = dup2(r1, r0)
syz_open_dev$video4linux(0x0, 0x0, 0x28000)
write$cgroup_pid(r3, &(0x7f0000000380), 0x12)

[  206.539136][    C0]  kmem_cache_free+0x86/0x260
[  206.539149][    C0]  ccid_hc_tx_delete+0xc1/0x100
[  206.539160][    C0]  dccp_hdlr_ccid+0x7d/0x150
[  206.539172][    C0]  __dccp_feat_activate+0x17a/0x270
[  206.539191][    C0]  dccp_feat_activate_values+0x33a/0x766
[  206.590080][    C0]  dccp_create_openreq_child+0x40c/0x570
[  206.595735][    C0]  dccp_v6_request_recv_sock+0x214/0x1da0
[  206.601459][    C0]  dccp_check_req+0x35c/0x6f0
[  206.606129][    C0]  dccp_v6_rcv+0x6d7/0x191e
[  206.610627][    C0]  ip6_protocol_deliver_rcu+0x303/0x16c0
03:42:12 executing program 2:
perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
bind$rds(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0)
set_mempolicy(0x0, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xff, &(0x7f0000000180), &(0x7f0000000240)=0x4)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00')
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
r2 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xfff, 0x480200)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000001400)={{0x7}, 'port1\x00', 0x0, 0x1002, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x7})

[  206.616258][    C0]  ip6_input_finish+0x84/0x170
[  206.621048][    C0]  ip6_input+0xe4/0x3f0
[  206.625196][    C0]  ip6_rcv_finish+0x1e7/0x320
[  206.629890][    C0]  ipv6_rcv+0x10e/0x420
[  206.634051][    C0]  __netif_receive_skb_one_core+0x115/0x1a0
[  206.639947][    C0]  __netif_receive_skb+0x2c/0x1c0
[  206.644968][    C0]  process_backlog+0x206/0x750
[  206.649729][    C0]  net_rx_action+0x4fa/0x1070
[  206.654407][    C0]  __do_softirq+0x266/0x95a
[  206.658898][    C0] 
03:42:12 executing program 5:
r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0xf000000, 0x0, 0x0, [0xffe7], 0x0})

[  206.661227][    C0] The buggy address belongs to the object at ffff8880a9a09640
[  206.661227][    C0]  which belongs to the cache ccid2_hc_tx_sock of size 1240
[  206.675805][    C0] The buggy address is located 0 bytes inside of
[  206.675805][    C0]  1240-byte region [ffff8880a9a09640, ffff8880a9a09b18)
[  206.688993][    C0] The buggy address belongs to the page:
[  206.694617][    C0] page:ffffea0002a68200 count:1 mapcount:0 mapping:ffff88809b3f3c00 index:0x0 compound_mapcount: 0
[  206.705298][    C0] flags: 0x1fffc0000010200(slab|head)
03:42:12 executing program 0:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100))
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080))

03:42:12 executing program 1:
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
r2 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0)
dup3(r2, r1, 0x0)

[  206.710670][    C0] raw: 01fffc0000010200 ffff88809b3f2948 ffffea00015e4a08 ffff88809b3f3c00
[  206.719257][    C0] raw: 0000000000000000 ffff8880a9a08040 0000000100000005 0000000000000000
[  206.727840][    C0] page dumped because: kasan: bad access detected
[  206.734278][    C0] 
[  206.736626][    C0] Memory state around the buggy address:
[  206.742256][    C0]  ffff8880a9a09500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  206.750309][    C0]  ffff8880a9a09580: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc
[  206.758365][    C0] >ffff8880a9a09600: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb
[  206.758371][    C0]                                            ^
[  206.758381][    C0]  ffff8880a9a09680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  206.758391][    C0]  ffff8880a9a09700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  206.758396][    C0] ==================================================================
[  206.758400][    C0] Disabling lock debugging due to kernel taint
[  206.758463][    C0] Kernel panic - not syncing: panic_on_warn set ...
[  206.784795][ T3875] kobject: 'loop1' (000000004d92d6ab): kobject_uevent_env
[  206.788691][    C0] CPU: 0 PID: 9 Comm: ksoftirqd/0 Tainted: G    B             5.0.0+ #15
[  206.788698][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  206.788703][    C0] Call Trace:
[  206.788734][    C0]  dump_stack+0x172/0x1f0
[  206.788755][    C0]  panic+0x2cb/0x65c
[  206.825844][ T3875] kobject: 'loop1' (000000004d92d6ab): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  206.835025][    C0]  ? __warn_printk+0xf3/0xf3
[  206.835036][    C0]  ? retint_kernel+0x2d/0x2d
[  206.835053][    C0]  ? trace_hardirqs_on+0x5e/0x230
[  206.835075][    C0]  ? ccid_hc_tx_delete+0xde/0x100
[  206.846382][ T8464] kobject: 'ppp0' (00000000ce4f47da): kobject_uevent_env
[  206.846522][    C0]  end_report+0x47/0x4f
[  206.846542][    C0]  ? ccid_hc_tx_delete+0xde/0x100
[  206.875540][ T3875] kobject: 'loop5' (00000000814a6324): kobject_uevent_env
[  206.875889][    C0]  kasan_report.cold+0xe/0x40
[  206.903764][    C0]  ? ccid_hc_tx_delete+0xde/0x100
[  206.908793][    C0]  __asan_report_load8_noabort+0x14/0x20
[  206.914433][    C0]  ccid_hc_tx_delete+0xde/0x100
[  206.915343][ T8464] kobject: 'ppp0' (00000000ce4f47da): fill_kobj_path: path = '/devices/virtual/net/ppp0'
[  206.919278][    C0]  dccp_sk_destruct+0x3f/0x90
[  206.919289][    C0]  ? dccp_init_sock+0x3f0/0x3f0
[  206.919301][    C0]  __sk_destruct+0x55/0x6d0
[  206.919321][    C0]  ? proto_unregister+0x4e0/0x4e0
[  206.947319][ T3875] kobject: 'loop5' (00000000814a6324): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  206.948109][    C0]  rcu_core+0x928/0x1390
[  206.962476][    C0]  ? rcu_check_gp_start_stall+0x250/0x250
[  206.968207][    C0]  ? sched_clock+0x2e/0x50
[  206.972643][    C0]  __do_softirq+0x266/0x95a
[  206.977156][    C0]  ? __sched_text_start+0x8/0x8
[  206.982016][    C0]  ? takeover_tasklets+0x7b0/0x7b0
[  206.987123][    C0]  run_ksoftirqd+0x8e/0x110
[  206.991635][    C0]  smpboot_thread_fn+0x6ab/0xa10
[  206.996570][    C0]  ? sort_range+0x30/0x30
[  207.000928][    C0]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  207.007169][    C0]  ? __kthread_parkme+0xfb/0x1b0
[  207.012106][    C0]  kthread+0x357/0x430
[  207.013030][ T8464] kobject: 'queues' (00000000b12a1597): kobject_add_internal: parent: 'ppp0', set: '<NULL>'
[  207.016171][    C0]  ? sort_range+0x30/0x30
[  207.016184][    C0]  ? kthread_cancel_delayed_work_sync+0x20/0x20
[  207.016196][    C0]  ret_from_fork+0x3a/0x50
[  207.016900][    C0] Kernel Offset: disabled
[  207.046102][    C0] Rebooting in 86400 seconds..