0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:28 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x8000000200065558, 0x80, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r3 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x24, r2, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c9b2202eb1aed88eb215e64ea5d563c83ca8e8441373474bfad0fd7e5bc2e580136fd823b86", @ANYRES16=r2, @ANYBLOB="000226bd7000fcdbdf250200000005003d000300000005003d00060000000800610006000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040810}, 0x41) socketpair(0x25, 0x4, 0x9, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$rxrpc(r6, &(0x7f00000000c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @loopback}}, 0x24) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r7 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r8 = dup3(0xffffffffffffffff, r5, 0x80000) recvfrom$netrom(r8, &(0x7f0000000300)=""/83, 0x53, 0x22, &(0x7f0000000380)={{0x3, @default, 0x2}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48) ioctl$EVIOCREVOKE(r7, 0x40044591, 0x0) r9 = fcntl$dupfd(r7, 0x0, r7) write$P9_RCLUNK(r9, 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r9, 0xc004ae02, &(0x7f0000000040)={0x1, [0x0]}) 09:01:28 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r3, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$P9_RCLUNK(r5, 0x0, 0x0) sendfile(r3, r5, 0x0, 0x6) r6 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r6, 0x40044591, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) write$P9_RCLUNK(r7, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r7, 0x400c6615, &(0x7f0000000080)) 09:01:28 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x684}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x803, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x40a4, 0x4) sendmmsg$inet(r0, &(0x7f00000026c0)=[{{&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000002100)=[{&(0x7f0000000040)="cf9d398d39b59205818ea5192310a3866f3fe2ad082769ded2993e8cf72c4698c9327a7b8763d50fb510e6f0cbe72816e71321dc5f18c829df075352", 0x3c}], 0x1}}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x800) preadv(r1, &(0x7f00000017c0), 0x218, 0x0) 09:01:29 executing program 4: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x5, 0x3, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8818, 0x10000, 0x4, 0x0, 0xfff}, r0, 0xffffffffffffefff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r3, 0x0, 0x6, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000000)={0x6, 'wg2\x00'}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, 0x0) ftruncate(r4, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x408002, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r5, 0x8004500f, &(0x7f00000000c0)) 09:01:29 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RREADLINK(r1, &(0x7f0000000040)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0xf0002, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r2, 0x80044dfe, &(0x7f0000000100)) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) 09:01:29 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x18}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:29 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x800) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{0x4b41, 0xfff}, 0x8}, 0x10) 09:01:29 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xd811) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000080)) 09:01:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x23) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="1a0074ecf9c9a79ceeea2eda34728c93052309f20644c3a3357b2335b9ba249c09e55331a0de8901320709da0717854414b151d5275d65bf23a0381d4e7f000000000000009692657b62aa87d60401a5fba40d72b3613b04d894df9897e34ca72c60b3580f429503e5e2eed84375dda2e98a064e7dd1fad127ded6c0623e6d52e25aaddc3ba8a3869fced8ea8de1c0d62d5c472b1855f2d6f4233ccf23b450c85cbbc8c792b3b11b07174d53d87671d759b8259af761b671165d851bbd85e2d1aae289"], 0x48}}, 0x0) setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f00000000c0), 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x17, &(0x7f0000000000)={r6}, 0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={r6, 0x800}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_BROADCAST={0xa, 0x2, @link_local}]}, 0x50}}, 0x0) [ 966.835049][ T9499] qrtr: Invalid version 254 [ 966.868082][ T9503] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 966.975071][ T9509] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 09:01:29 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$P9_RCLUNK(r5, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r6, 0x40044591, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) write$P9_RCLUNK(r7, 0x0, 0x0) recvmsg$can_bcm(r7, &(0x7f0000001580)={&(0x7f0000000240)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/235, 0xeb}], 0x3, &(0x7f0000000580)=""/4096, 0x1000}, 0x100) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f00000016c0)={@can={0x1d, r8}, {&(0x7f00000015c0)=""/133, 0x85}, &(0x7f0000001680), 0x3}, 0xa0) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, &(0x7f0000000100)={0x0, 0x0, 0xa76, 0x104}) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000001780)={0xcc, r3, 0x8, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe0}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2d}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8081}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) 09:01:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) rt_tgsigqueueinfo(r1, r1, 0x3f, &(0x7f00000002c0)={0x5, 0xea5, 0x400}) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RCLUNK(r4, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={&(0x7f0000000040)="ec3ebe419d38c356c82c76a5a19d9551aedf9a70cc6e3388eb63f32a8e9d463aa8e4cce8918a3fe70dafb2d547328e6415d21d4bfc2e3916b87c71889258b7f3ba4b96532c2e6f2cf830c527b50b05c2217451661c5bf25860a8e507", &(0x7f00000000c0)=""/16, &(0x7f0000000100), &(0x7f0000000140), 0x97, r4, 0x4}, 0x38) r5 = syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x9, 0x2000) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x101180, 0x0) write$UHID_DESTROY(r6, &(0x7f0000000200), 0x4) ioctl$VT_RELDISP(r4, 0x5605) ioctl$RTC_UIE_ON(r5, 0x7003) 09:01:29 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2a8, &(0x7f0000000a00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A'}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000100)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$P9_RCLUNK(r5, 0x0, 0x0) ioctl$CAPI_CLR_FLAGS(r5, 0x80044325, &(0x7f0000000200)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000040)) 09:01:29 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r1, &(0x7f00000017c0), 0x218, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000040)={0x20, 0x803a}) 09:01:29 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x60}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) [ 967.193642][ T9518] qrtr: Invalid version 254 09:01:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x8) ioctl$TUNSETFILTEREBPF(r0, 0x6628, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f00000002c0), 0xfffffedd) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @private=0xa010100, 0x1, 0x8, [@multicast2, @loopback, @broadcast, @empty, @multicast1, @local, @empty, @dev={0xac, 0x14, 0x14, 0x3a}]}, 0x30) 09:01:30 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000040)) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r3, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$P9_RCLUNK(r5, 0x0, 0x0) getsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f00000001c0)=0x3, &(0x7f0000000200)=0x1) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f00000000c0)={0xc, {0x7f, "cd3f041e7a8ccb77132f46622af491fd85bd1327475e480c1dd39397e84a3bba0d2a0ffa4a27f8c546dabb70e2e17d846c2f08e21ce572625b4403e38f74418c06cb3d3766dc20d990e667c48257593f39cde13ed7edb4295307817397c5ed846620e7e837a78224364214a49ef9071b07593bcee198223994079abf6688dc"}}, 0x85) r6 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x1017c0) ioctl$EVIOCREVOKE(r6, 0x40044591, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) write$P9_RCLUNK(r7, 0x0, 0x0) writev(r7, &(0x7f00000002c0), 0x0) 09:01:30 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$P9_RCLUNK(r1, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000001140)={0x1, 0x2}, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RCLUNK(r4, 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, [0x6, 0x691e80ae, 0x1f, 0x6f2dcf50]}) epoll_create1(0x80000) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r5, &(0x7f00000017c0), 0x218, 0x0) 09:01:30 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x1f4}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:30 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000000c0)={0x20, @tick=0x6d217889, 0x0, {0x81, 0x9}, 0x6a, 0x2, 0xff}) sendfile(r0, r1, 0x0, 0x40d14) 09:01:30 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)=0x7) syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:30 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x400301) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="ee", 0x1}], 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r3, 0x0, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r5, 0x40044591, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) write$P9_RCLUNK(r6, 0x0, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r7, 0x40044591, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = fcntl$dupfd(r8, 0x0, r4) write$P9_RCLUNK(r9, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r9, 0xc0845657, &(0x7f0000000000)={0x0, @reserved}) write$P9_RLINK(r9, &(0x7f0000000100)={0x7, 0x47, 0x2}, 0x7) [ 968.259149][ T9557] overlayfs: './bus' not a directory [ 968.272354][ T29] audit: type=1804 audit(1593594090.832:105): pid=9561 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir737841639/syzkaller.3Dz1bw/1069/bus/bus" dev="sda1" ino=16376 res=1 09:01:30 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x1800}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:30 executing program 2: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000040)={0x2d, 0x4, 0x0, {0x6, 0x0, 0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2d) r0 = syz_usb_connect$hid(0x0, 0x21, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x30d4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\"s'], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="200102"], 0x0}) syz_usb_ep_read(r0, 0x81, 0x1000, &(0x7f0000000540)=""/4096) 09:01:31 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) [ 968.429866][ T29] audit: type=1804 audit(1593594090.992:106): pid=9557 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir737841639/syzkaller.3Dz1bw/1069/bus/bus" dev="sda1" ino=16376 res=1 [ 968.443679][ T9561] overlayfs: './bus' not a directory 09:01:31 executing program 4: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000140)={&(0x7f00000002c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000cc0)=[{0x0}, {&(0x7f0000000700)=""/212, 0xd4}, {&(0x7f0000000880)=""/94, 0x5e}, {&(0x7f0000000900)=""/235, 0xeb}, {&(0x7f0000000a00)=""/245, 0xf5}, {&(0x7f0000000b00)=""/226, 0xe2}, {&(0x7f0000000c00)=""/168, 0xa8}], 0x7, &(0x7f0000000d40)=""/195, 0xc3}, 0x10001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xb0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000280)='rdma.current\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x34f, &(0x7f0000000440)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A'}, 0xffffffffffffffc0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x200200, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r6, r7, 0x0, 0x10000000000443) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x19) 09:01:31 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x80000) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) fcntl$dupfd(r2, 0x0, r2) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$P9_RCLUNK(r5, 0x0, 0x0) recvfrom$inet6(r5, &(0x7f0000000400)=""/133, 0x85, 0x41, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x101c86, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',aname=@]#@-#-,mmap,fsmagic=0x0000000000000000,func=MMAP_CHECK,permit_directio,uid=', @ANYRESDEC=r3, @ANYBLOB="2c61707072616973652c7375626a5f747970653d2f646576afc1d551722d74756e002c6f626a5f726f6c653d2f6465762f717274722d74756e002c7365636c6162656c2c00"]) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = socket$inet_sctp(0x2, 0x5, 0x84) fsync(r6) 09:01:31 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x6000}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:31 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) uselib(&(0x7f0000000040)='./file0\x00') r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000080)={'icmp\x00'}, &(0x7f0000001140)=0x1e) [ 968.844893][ T6490] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 968.900478][ T9583] qrtr: Invalid version 254 [ 969.051760][ T9589] qrtr: Invalid version 254 [ 969.095075][ T6490] usb 3-1: Using ep0 maxpacket: 8 [ 969.214939][ T6490] usb 3-1: config index 0 descriptor too short (expected 36, got 15) [ 969.271665][ T6490] usb 3-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 969.301867][ T6490] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 09:01:31 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:31 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0xf401}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:31 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000040)=0x404100) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000080)=0x2, 0x4) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) [ 969.319625][ T6490] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.40 [ 969.332273][ T6490] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.356583][ T6490] usb 3-1: config 0 descriptor?? 09:01:32 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:32 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:32 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:34 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x1800}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:34 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4011, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RCLUNK(r4, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000001180)={0x4, &(0x7f0000001140)=[{}, {}, {}, {}]}) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r5 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r5, 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r5, 0x80044dfd, &(0x7f0000000080)) syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r1, &(0x7f00000017c0), 0x218, 0x0) 09:01:34 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:34 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x18}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:34 executing program 5: openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qrtr-tun\x00', 0x705041) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x2100, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x40, r1, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={[], [], @rand_addr=0x64010100}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x20008810) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd0, r1, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'erspan0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bridge\x00'}, @NLBL_UNLABEL_A_IFACE={0x14}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:mtrr_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}]}, 0xd0}, 0x1, 0x0, 0x0, 0xc010}, 0x404c8a0) r2 = socket$isdn(0x22, 0x3, 0xa387277b2007490) writev(r2, &(0x7f00000002c0), 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) [ 971.725649][ T12] usb 3-1: USB disconnect, device number 9 09:01:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x68, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x68, r1, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xfff, @link='syz0\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x20008800}, 0x8000) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) writev(r2, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) 09:01:34 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0) [ 972.037049][ T9645] qrtr: Invalid version 254 09:01:34 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0) 09:01:34 executing program 5: openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qrtr-tun\x00', 0x10d541) r0 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0xfffffffffffff000, 0x208002) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) prctl$PR_SET_UNALIGN(0x6, 0x2) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x0, 0x2, 0x8b, {0x8b, 0x4, "e8bcfc9f6cfed95d74c3bee2dd406f45281deac57d36d975d3c7ed9f0d624e5d765311f4f19e9c59246a3345dcd793042bbb9e2f2494b5ed42acd6a5e60e169c479e11e90482b55d3f5d5191c09b6977b3188217f7ada1d336f159b4c13224be4e7118dbdb0e4ce5b2e5f774fc3effd8a3c4b3938328528ec01b4d8c8f6355536099a00f6f93fe4275"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x40, 0x15, 0x33, "98f0c1c930f4479e633aa7764f3297318f3f40fb28e64a09bf5999465528a7fd4eeb5bdbc9af6a2281bdce73cabf6900022537"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x288, 0x0, 0x101, 0x2, 0x1113, 0xfff, 0x2, 0x20, 0x7, 0x1000, 0x7, 0x3ff}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000300)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000340)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000380)={0x20, 0x89, 0x2}}) 09:01:34 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x60}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:34 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0) 09:01:34 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) 09:01:35 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x1800}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:35 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:35 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x1f4}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:35 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r4 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x24, r3, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000001180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001140)={&(0x7f0000000080)={0x30, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_SSID={0xa, 0x34, "72fbb0b619e6"}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x815) syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r1, &(0x7f00000017c0), 0x218, 0x0) 09:01:35 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:35 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:35 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x1800}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:35 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RCLUNK(r4, 0x0, 0x0) r5 = pidfd_getfd(r2, r4, 0x0) statx(r5, &(0x7f0000000040)='./file0\x00', 0x6000, 0x4, &(0x7f0000000100)) 09:01:37 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x301001, 0x0) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x13, r1, 0x0) 09:01:37 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:37 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x6000}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:37 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x1800}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:37 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x200000, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080), &(0x7f0000001140)=0x4) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:37 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x600500, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f0000000100)) write$P9_RCLUNK(r2, 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x0, r0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0xd811) r6 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x90483) ioctl$EVIOCREVOKE(r6, 0x40044591, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r7, 0x40044591, 0x0) fcntl$dupfd(r7, 0x406, r7) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff}) r9 = fcntl$dupfd(r6, 0x406, r8) write$P9_RCLUNK(r9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0x4) [ 975.407467][ T9716] qrtr: Invalid version 254 09:01:38 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) [ 975.430073][ T9716] qrtr: Invalid version 254 09:01:38 executing program 5: openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r3, 0x0, 0x0) writev(r3, &(0x7f0000001100), 0x0) 09:01:38 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r3, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x17, &(0x7f0000000000)={r6}, 0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000100)={r6, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x8, @local, 0x401}]}, &(0x7f0000000140)=0x10) r7 = fcntl$dupfd(r0, 0x0, r1) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0xd811) 09:01:38 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0xf401}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:38 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) pidfd_send_signal(r1, 0x10, &(0x7f0000000040)={0x15, 0x81, 0x9b}, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x10, 0x0, 0x0, 0x41c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000001140)={0x3, "18b4a58581c327c11b84e57f3e0f44801788762bfb42d87cef7f10c7fe5d1037fd74e839fac4e3b31d7ddaa047fde63518d086cfabcacfb43088866944d8af45", {0x37, 0x6}}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001200)='/dev/dlm-control\x00', 0x882, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r5, 0x40044591, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) write$P9_RCLUNK(r6, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r6, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x78, 0x453, 0x0, 0x70bd2c, 0x25dfdbfb, "42d1426f2561e41798fd02e6112fb1bfee9362735c70176521ebf05713ff3e6990dd47611e8a08e7b95cd8ce8343c507551c49c51eca7b6c89f95f2467c3bce711f18d681449510adfb0a6d4ba6df9caf58f5735ea98063c7a42af6ed614180d4f98e4627219", ["", "", "", "", ""]}, 0x78}, 0x1, 0x0, 0x0, 0x4004011}, 0x4) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000001240)=0x400) preadv(r3, &(0x7f00000017c0), 0x218, 0x0) 09:01:38 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:38 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r3, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$P9_RCLUNK(r5, 0x0, 0x0) sendfile(r3, r0, 0x0, 0x3) 09:01:38 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:38 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) writev(r2, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) [ 976.054907][ T9747] qrtr: Invalid version 254 09:01:38 executing program 2: openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qrtr-tun\x00', 0x10d541) r0 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0xfffffffffffff000, 0x208002) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) prctl$PR_SET_UNALIGN(0x6, 0x2) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x0, 0x2, 0x8b, {0x8b, 0x4, "e8bcfc9f6cfed95d74c3bee2dd406f45281deac57d36d975d3c7ed9f0d624e5d765311f4f19e9c59246a3345dcd793042bbb9e2f2494b5ed42acd6a5e60e169c479e11e90482b55d3f5d5191c09b6977b3188217f7ada1d336f159b4c13224be4e7118dbdb0e4ce5b2e5f774fc3effd8a3c4b3938328528ec01b4d8c8f6355536099a00f6f93fe4275"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x40, 0x15, 0x33, "98f0c1c930f4479e633aa7764f3297318f3f40fb28e64a09bf5999465528a7fd4eeb5bdbc9af6a2281bdce73cabf6900022537"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x288, 0x0, 0x101, 0x2, 0x1113, 0xfff, 0x2, 0x20, 0x7, 0x1000, 0x7, 0x3ff}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000300)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000340)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000380)={0x20, 0x89, 0x2}}) 09:01:38 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x18000000}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:38 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x1800}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) [ 976.159777][ T9750] qrtr: Invalid version 254 09:01:38 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r1, &(0x7f00000017c0), 0x218, 0x0) socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$P9_RCLUNK(r3, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xffffff7f, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x7, 0x1, 0x9065b9eafdc01d1d, 0x0, 0x0, {0x7, 0x0, 0x9}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x9c094) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x374) setreuid(0x0, r5) r6 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r6, 0x40044591, 0x0) fcntl$dupfd(r6, 0x0, r6) pwrite64(r6, &(0x7f0000000200)="e1439436365df62dd63e37f05679d649bdb2def15384e0af61e279ec029111e9bec58992f64b3689c1884db580ab138dea22f54f014f470cc0a5765b988e3887e3aaf9db546bb82e12b53c9cc3ea95c1dd004cef666909627fd8db9bfd07b3e76158910e2b32b14469c0aeba3ae4309bdf5a8c1cda68b153a62e6f381f3cee78ba45dc4be2799e", 0x87, 0x5) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x40080, &(0x7f0000000140)={[{@nfs_export_on='nfs_export=on'}, {@index_on='index=on'}, {@xino_off='xino=off'}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_off='nfs_export=off'}, {@xino_off='xino=off'}, {@index_on='index=on'}], [{@fowner_eq={'fowner', 0x3d, r2}}, {@subj_type={'subj_type'}}, {@uid_gt={'uid>', r5}}, {@smackfshat={'smackfshat', 0x3d, '\xd1#'}}, {@obj_role={'obj_role', 0x3d, '&'}}]}) 09:01:38 executing program 4: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:38 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)='children\x00') r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$P9_RCLUNK(r5, 0x0, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000300)={0x100, 0x9, 0x5b, &(0x7f0000000240)="77e6f4d11d49643f053ab5b12902ef4d506e1f3170ba3a89c58e851d35688691964009d7d935a92abe407c87965787248f670326c2c70d94fdbe64ecb59b08c8c04c62f6df124ea5e6b628e56d84ae7de5f824329ed5568c134783"}) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000180), &(0x7f0000000200)=0x4) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x9, 0x9, 0x17, 0x0, 0x0, 0x8, 0x34, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ff, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x5, 0x0, 0x3, 0x7fff, 0x4, 0x8}, r2, 0xe, r3, 0x4) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) 09:01:39 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="fe", 0x1}, {&(0x7f0000000100)="89d7884939f35bfd0e966018551a3afcd3e8c511bb63fbda94d7e21e97ef351ee590c18548cd6f2bb0d52f44371dd11162a9cffcc1562544a12834b8f1ff5cb1003b1e6f9c76cd2e67c633946a079339bfa94de0d096ddbf7c5dcf2c48b395b8f2314bc49e1e679363eedafffe5a08e519cd33db069480b46b71191bc4f127d8787ec9c5b3063abd610905f4268cd1", 0x8f}, {&(0x7f0000000240)="9ad2ee21dfe9e8131e57eeeb347bc01e8b30e9627590f3f501abde38f6d9949a4d50934f5c3643864b367e43e17112c007cfb718019945d38c539b2074f6f632b55cc95842e557526e0772d6da2ec9a7e16fbd13d214dd22b65ccd87", 0x5c}], 0x3) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000002c0)={0x5, 0x3d, 0x6, 0xfffffff9, 0x3, [{0x0, 0x1b71, 0x6, [], 0x2000}, {0x3, 0x6, 0x32c95638, [], 0x2002}, {0x7, 0x4, 0x5, [], 0xdf4fc1f20df3d79a}]}) 09:01:39 executing program 4: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:39 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00', 0x40) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:39 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x60000000}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) [ 976.656515][ T9779] qrtr: Invalid version 254 [ 976.714536][ T6490] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 976.736979][ T9779] qrtr: Invalid version 254 09:01:39 executing program 4: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:39 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x1800}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) [ 977.044090][ T6490] usb 3-1: device descriptor read/64, error 18 [ 977.464101][ T6490] usb 3-1: device descriptor read/64, error 18 [ 977.734101][ T6490] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 978.014008][ T6490] usb 3-1: device descriptor read/64, error 18 [ 978.453961][ T6490] usb 3-1: device descriptor read/64, error 18 [ 978.582440][ T6490] usb usb3-port1: attempt power cycle 09:01:41 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r4 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x24, r3, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000001180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001140)={&(0x7f0000000080)={0x30, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_SSID={0xa, 0x34, "72fbb0b619e6"}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x815) syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r1, &(0x7f00000017c0), 0x218, 0x0) 09:01:41 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x38}}, 0x80) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001740)=ANY=[@ANYBLOB="340000001400210100000000000000000a000000", @ANYRES32=r5, @ANYBLOB="14000100ff0200000000000000006fbb000040010800080019060000e5cac82d88d8a487a204fbbf38e843c6694e5dc5b150c30a51c3675707a42a99418108e39b061ccef75091fc6b58dbecdea6d397d14526e89aa72b7411c23fecc9f88143822f3443601e6050526ba1fe584b5cac41ab52c57faaf29a7ed924a09eebe21f796651c05123ab87575b02bbfab3860b2304b4578ff35f3f03f71014507038ba294ac52d812701d8f255eb9eceaa35e6fe36d9124f02f7f681d1ecdaa9cc74391ad6afcb80000858015ebfd11e541167e75686e103bce432c915"], 0x34}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002500)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@private}}, &(0x7f0000002600)=0xe8) sendmmsg$inet(r2, &(0x7f0000002680)=[{{&(0x7f0000001140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001180)="704e8f17abece260d8ec2d76f37edf5f1b66de16925463169147bad159b340a442fed7a95321e58daeffccec4353e133b2e83e2cf5a15cacdacf6f9d772a22eb1c072883e2048461181835b65bf3045b47a65fcbcdf03ef7b8e17fcabdbb7fe47649dde725f449ab2367cb406ca6bdb0524e9f05687f23a74709e8f44eaad2e7a16245", 0x83}, {&(0x7f00000012c0)="9a497cc16bf197c9d6c1175c633362ac4811cedd833ee412a5ee02d008cf9adc146ec80a0123ffeb7c38619d1a9335a8dba61486976feb3bc42f7e92e8f8b22c3e237e34fb9316cd36638f61dad0e2b92d963bd79fdf32d676b083a60bed95a810c2d883d76bbb4b01c25521c84c891d15175957cb3ce13c68d14c1279165ae73baf56d8688988f00456b4efd539dce5a6be7d8c6cbeb1d1c2e2b1a07e763acf082da41e1f06857701429da57095ea41d24d2b46f853e98b3bef2e7dcfd1fb0ebcf497010063341e4af3d1ca9d67a1f7b4d2b737c3abb9a3b1eda7ba404d826cca70e3743ab346cbce57702978931b9903800e6e", 0xf4}, {&(0x7f00000013c0)="303295e9662674dcef2be0f480d36b7fd16dc564dd4c33e683db6b46711e26d03fc249f3517387e87a201359fa21527c1622fa17dda0c5f76f3559c951feb63fe1b73a1cd66ee7d120fd0c7ab0046e92ff685c684dfbeacf8bee809405492215b2e6ee21251b400fde331a845748cf6a0dd8e307ac4070d17748921144013c3629c374c840ecceefdc9f993f0b6275", 0x8f}, {&(0x7f0000001480)="66ff5113439c43eacfc3ad7b084ccd5a5b7355baaa7f313dd3e2a9368a1dfbdbe5ecc61b0b6413296c3f5469267a673c96135dda09db81af466a8c61eea1a471d452a17bbdb333cdc6fbd7cfab41ada2bb4261e2485483578cbfe4adb72a9802cd5386d1d3a1e5835bb89e459367866f1155", 0x72}, {&(0x7f0000001500)="b50026b280db5af1647064e57d27931c16389b05af641e4b96a1bc89cd8d612f376be4f4837c28791ad59b0aef531d40772772d9f4d8c4df0efbfb9944f4c4c6b9411a58c095916b5cfc920a89bcdbd767f5c7451562a4521865e709beae8581de6ad46b42fff7e1ecec73fe4b85587dec58f002f707962de10ffcdbb30f7bda4ce5e6109c12680028b3622412e3d42276ca83b31fd77a4eb154b9f1f9e849c66fda666904be4091d68230e9bc4e269c63acc778aa8188686194ab5e8cf7b3b0b475d602ef16bf24727c2a92", 0xcc}, {&(0x7f0000001600)="6327f198089e35c8432b0a76bee7ccb8d5a5efe3239e6461589b450356aa179abe2efa42d5192ba35f88ec7bb36dd2fc0ba3aa13277ad7a4cb0b68c80db6c6dcbd0d874e51f8782e437ca05f92624df98e2ad22c3206b0c75269e0958e546af40226ec3e9c2b4628e11dcbc242c430a09fad4297564d2e8c0baadc536bc3bd88e05fbdc129c66fa7219c8f917b71b031b7c692d5bcc6e9ce2324862a4be70be16c05b9d51bdc6026c8", 0xa9}], 0x6, &(0x7f00000027c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @private=0xa010102, @multicast2}}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14}}, @ip_retopts={{0x34, 0x0, 0x7, {[@timestamp={0x44, 0x24, 0x35, 0x0, 0x4, [0x5, 0x7fffffff, 0x9, 0x800, 0x1, 0xffff, 0xc37, 0x4]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffe0}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffff60a4}}], 0x108}}, {{&(0x7f0000001240)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001d80)=[{&(0x7f0000001840)="2f0ce2600ee7bd975882209806e82db2d1a0fcdda35a582ed124ddf4d1b2f90a528fb37a23f2fe5c8695cfbd79b527316024aa26347d1ba4becaef026ac887a3ec4e2a90d2800bc5d392d85cb0847e1f8abb0a4c3dda28650e67d2d1c0f8335a4f", 0x61}, {&(0x7f0000002780)='6>', 0x2}, {&(0x7f0000001900)="be3ed56c97bd5f9df285d9ed26d24354775c018683e72b7c1944421ff86ad74ec4286d2fab04eca28e052af4ecaae774849b325c0bea5daff783de15bcdd8c286ce284575a4692a10bb4fd7a528952f7000365f0edfc9fcefbee1f3e558dc8116e05f95e18cbea1f9e91fd08f28fe1d42bc8340312fcfe3d81e23910bd8248ddd9265ac0f771", 0x86}, {&(0x7f00000019c0)="02393c02260ff019f0170fe8f5e0fb9117ce6d04b6b7264852173c1b13378a", 0x1f}, {&(0x7f0000001a00)="60290f5c9f8c883b2e4f04a2ae131f486980e394d5d39dde82ad7adbd4ce662c", 0x20}, {&(0x7f0000001a40)="7c616938f68db06bd1a5155d3641eff77fe8298d72ade2a5ac37e89c7f28e63391c3cb8f7f76f120fa0fff4e681aa71b8951c3ecaed35f4ec6a079c354ee4de57b2ca80288759967a61b6d60ee64c598e25461506a3ee4f338d5b8268a6dd8097c0cb941f3765047cfccdf8e73dd00213f4cad9da01d0a05c27fd669823b88953655393f880fc11c7a428acbe9f2f5f0efdf42", 0x93}, {&(0x7f0000001b00)="45d1278d2e84ee8142bd7bd78ba04ece943df3f3ec846279d06e9d4e2e5b3cfb649ce8da17ce4a979e501eefca2321dac5ef646d5130fdfd6eef934ff69d6b898e8bfad8af6a89465751ae1f488cff824eb4651cd38466de367f21584902e83d037017608839044b76df7334dab0e488e14fafa0d052274b5c7b8b7b0c35d39617f3415b071da6b055d87e530b3a02a7cb43d4b81949aa67e57e8c14e4639567a4a3f29a0bdcf1c273d6ecae2fb7be60cc69a15554f3e746eda96c11fc657c3d9ccbc7cac693946c", 0xc8}, {&(0x7f0000001c00)="ad4463bb32c588e0860048f90b789edd0ee516f278f570d28bd72bcc4e06662fa61f7f5e9850645529bcd8a0c19d2b1cf4930eab20cd21ba6cc763b910c43845663c44a0e8af714e41d271a3e7eb190b4000f8cff9d281", 0x57}, {&(0x7f0000001c80)="17794f24b8e221e961b748e6c14be05df6e407752b788bd24f7a7b2157916f224eab4f87c1e693525c8d58852e59f5c6cfa9dfd420631d2442ea184e39d403add18d596d17544d217e06fa3902ad9842c149c1cdbfbd4d5b3470dbf9ff30cea2098e29726c6ba56b2445bc8cf7eed372d58bab670cffc7a522761ebb03cecf7f3aa9d477411d189d1f91e56c465205ba534672a608abc04b0d3a6cdaa73e6fbb80e77cda690bd649f2f32da96e70dd27fcd48363ff52803ab7119dd871bfc9238070e03f0a61a89d648de499ef7fd2d93f46746990b8f393cd52bde71605ceed10c7eda71958c5f71c834587743d27ccb5c87ea8a78da6b6a6", 0xf9}], 0x9, &(0x7f0000001e40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe547}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x90}}, {{&(0x7f0000001f00)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000002040)=[{&(0x7f0000001f40)="2aadbb887ab550eb9c4ff8eebd72117f56412dc088104b5ec70b6683a85d7a6a9722dcc4678d59e712ecaf87707c0f35cb5d6d81fe9f07fc1905bb6242d6add44886cf9e3dfc1ce2fc162c4753a5a5c5d3211fa154e618e053999a671b855c955583a6db3fbe9fbd52193c85702f961bbb8a480ec2e3cc43f766e5170b1d890b20ebca77facead2a5be2525eba3c5fdde1ac29d912cde8565ecb1e460c33cb31878b8a8aaecb02b94a563fe7ab522e1e27886b59c2d457b497132a542b735a20104f3e03bb612248e8ff54d20a71d9480dbd6e", 0xd3}], 0x1}}, {{&(0x7f0000002080)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000002480)=[{&(0x7f00000020c0)="bafce0a00a230e1d22d026a2d2fdfaeaa1cf98b99f14c0767b2c5d5207617ff31b05d985dcdc6d4da0d34479ee8df91d9c3b05a78ff8e78d6ce30136c326d8025f6f16a92d50e560a5602ce20339ba4b94ce128b7781d6ebf7308d5ccd8fd0aaef8ebd00990ebfcf2f3302a27c966de6dbf0036033508a3ebdf3ffa725cd73e23f86f8a8e6bbe522809697021ce99d88806c7d0f6698bae10b901aec58ea18500c3eaf630b503b51da15030fbe3c4d857914375ba9f880315a1be0af7ca914bca15f987be3bb659d183778da9145def53da8c1f5168af5e5be08c666f8", 0xdd}, {&(0x7f00000021c0)="51321ea2e974471ea1038e812c660090e585473a808e8a1b0fb1b9cd8691c9bf41a8617c7613706958065510e607653151248c98939ef061db0ae72b70bf0ec2d848e9f17e963144bb02a09a79d4174772c4ac672c9383f0d27cbb8c7f56ead8998da32c6d11ed57aead864ff6d593cd7cd0d31b39ecda6421f3086d054d19ecb83079933d42dd35278fcc2778089b114a2f055e2947c5e3a35ae0be2af64bbed27740fb4ef0c39bbe", 0xa9}, {&(0x7f0000002280)="68aeddbe4106915e2b8f195f8c17b973c78376f66f92592c97d614c917d6ed876d578a204d26446bc64d27e9", 0x2c}, {&(0x7f00000022c0)="d3adfb396a68762a63a2fd9d26f62e3c0051d1902c9cf5f932e3ff41c2336dbb1fb5d0037db28fc2fe7a87b98c0079930f74bb0aa6ec499803baf592d029c1ee59f82735adba41679a983bcbe9f8f05ee3a6995fb115a07380c382463b9ae091e09a95d267eb9b7acb803ff11e7f02935384329466766f5c1345a90a8b64cb51df9e353539905ac4003a36055d38df392ad4ceb8532fb45b19384885", 0x9c}, {&(0x7f0000002380)="c1b375e1b24ec95c70de3e4809fd344895db6b0037bbbc51ea19a8fdb8586285e1d488f7fcb61624b5e13b979566b7e8d3cf4b2414e8fad81fcff3367e2f", 0x3e}, {&(0x7f0000002400)="f95340b03d2e58b0beae11efbebfb9fabcad82ce0ac4821dd0ae6ec10bfaa433bb173e017aae0b26de79851d561d28c518691be2145b6bd65db32d3b5b19f5d561cdc4b4cfb3949de0ee", 0x4a}], 0x6, &(0x7f0000002640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0x64010100, @remote}}}], 0x20}}], 0x4, 0x4000000) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f00000018c0)={0xfffffff7, 0x80}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r7, &(0x7f00000017c0), 0x218, 0x0) 09:01:41 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:41 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00', 0x40) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:41 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0xf4010000}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:41 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x4a01c2) ppoll(&(0x7f0000000240)=[{r0, 0x4000}, {0xffffffffffffffff, 0x110}], 0x2, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={[0x100000000]}, 0x8) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000580)={0x968, 0x0, "6ac02b42672181affb9200d71f2fffd7c2d926d635da2f92cd3da833c26ad0747ba0d5587e4fe997551c94787c27948439bd1a95c886437b3dfe0c8b11493c296208ff71b4dd8a6344a5c2a88e3f4901a289099bc07749926a2b3019dbddb01b07dec2547b945f7dbef79b792c7d975d04f7f8a46eb43d0bb0e4c627b4e5d1486f3ebd68a7ce9a5c91c087bde256f598ea36e3a841480f09291fdb884f3c49b1819b9a8ef44edd287eecbd79cf3c902139f15ab135a2c6a475c58efef863156a4aa69a06e9da91c23e9736a83f95493c82769c808734deff235ae0092d8da7575fb51533a8a34386813e15f3c941812be241fa25c2648b9250e90a889a1309ff"}) r3 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r3, 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vsock\x00', 0x400000, 0x0) r5 = syz_genetlink_get_family_id$netlbl_calipso(0x0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="77443e1fd4090000441e4ab0012c9186d7", @ANYRES16=r5, @ANYBLOB="e278b85f28759f09955e5316d13f87736bbd7deacaf78eff8273b619d89fdd1c9af44d934d3043ebc04c6bd07fe6d75aad"], 0x24}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, r5, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x8844) getsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0x4) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000040)={'filter\x00', 0x0, 0x3, 0xae, [], 0x3, &(0x7f0000000000)=[{}, {}, {}], &(0x7f0000000100)=""/174}, &(0x7f0000000200)=0x78) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000540)="f632e8e2082c75a2e66005d368c8439c696b0517bba2b11de0bc5d425e5f0e1135dee476adb89706ac54130767aae8f03b13b76804", 0x35}], 0x1) [ 979.312639][ T6490] usb 3-1: new high-speed USB device number 12 using dummy_hcd 09:01:42 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:42 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x420500, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:42 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00', 0x40) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:42 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:42 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:42 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) [ 979.804031][ T6490] usb 3-1: device not accepting address 12, error -71 09:01:42 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000040)=0xfffffeff) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000080)={0xef1, 0x1}) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:42 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:42 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:42 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:42 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr, 0x18}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:42 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) r1 = fanotify_init(0x1, 0x400) fallocate(r1, 0x19, 0x100000001, 0x8) 09:01:43 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:43 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x2, 0xfff, 0x0, 0xfffd}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$P9_RCLUNK(r5, 0x0, 0x0) ioctl$TIOCSIG(r5, 0x40045436, 0x3e) preadv(r3, &(0x7f00000017c0), 0x218, 0x0) 09:01:43 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) [ 980.558548][ T9863] qrtr: Invalid version 254 [ 980.592540][ T9863] qrtr: Invalid version 254 09:01:43 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x374) setreuid(0x0, r2) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x7, &(0x7f0000000200)=[{&(0x7f0000000300)="4e8847deb113e803a23f6db639c2bb125bcf8b86d192cfc95adf2d881287f46a971102a950518512fa8ec5fee083d896bafa07432269a3e29a61fffcb214c32a234f5278d0b631ffc0d0abc15b2e4c9267099b9485bfcb35804ceac977fcd12c1af64b3bd7831c542b4a915f7d30a5ccbab74fc4a4cb2aedb564800cfbd1ab91b3daa94c6fb45f7e89b3a980e58360b471f5d044c1caba2cee4b5460663d9b5852294f9361c12570d37afc923fa4fc11f044fcfa3bcc62a629109069edafc3217e6365c0e3354b74c412867af4520f1cdac02eea267ed529738362b741399257425d2874e082b34ef97b27fadb8601dfccd7f6a4076ab641cfbe96c6da", 0xfd, 0x100}, {&(0x7f0000000400)="4993ef8d64a573f2bffa2c4e5f0ab8d8e91eddd1d23bf4e2f67e7d2b430726a6eb4d19437682a5a60070922c953c676be74d993d0903fced0ee9dff6236a4c22db57c024c444a174bd526a6c50f402d952f1760a6315ec8c4728701825a273481447c9dfc9a9c01276fdaab1544f32d0288b0968554244435759b18bffbf036234d2bb4fc011cc838f8de7a9739482535da0c699bdd3a0c00bb0f0baa752df5b58ae7bcb74d34d24b76b94e34a8884bb725b13991f7157cea3f57505af46a1d5d24b80bad2ce01235803b6c89fe73780b6d3a8a211a9d5d45b", 0xd9, 0x8}, {&(0x7f0000000500)="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", 0x1000, 0x9}, {&(0x7f0000000080)="0121ecb472d089675b247f31342df3", 0xf, 0x7ff}, {&(0x7f0000001500)="04c0de6f5a0101e619505d0d3720fe628cf92f3481d616629c81b9707647aa7c5d0600d33b25963e2485336ed3bc7cf03c25656b1347866d444643a3a29ee72560c28ab68fb8a85a2a5bd2cbd4363a6ca582317219160ce1047614bc2fce1afb6101c1b3e9a4b865d7019e13a30da7665b00c6716ac655ff3721b7a938f4cac2f56e83e9df459b2d009ee46444e8318bb2142b831e6fdeb94d1383421745d112d8fd672d38ce1d104b088a1aa337f396651a6c353d45bc6795e8fc31d690bc79e6b16b5e4157676b6854fb1aafc86c37e6e82612", 0xd4, 0x6}, {&(0x7f0000000100)="88b88e8359db9057da900f3534319c8cec8f338c39d4dc06c8834624b649b9bd9280cd4a20b293311096d9c9cea75d50409f5809efa91bede9825b18d6862e989c5f8c56f6af291a9f563b21cc04347218249997da4c49bf5ea38920a9a1f228ea28c6b0c73d506dfa7bf8bf06194824c26aed1dd7dd7980cdb3740f05d36c703394248618a10f68515bca23bc3896f5dfc59653b0dc2452825e52bd193d7a7b1d5a25e1", 0xa4}, {&(0x7f0000001600)="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", 0x1000, 0x200}], 0x40, &(0x7f0000002600)={[{@sysvgroups='sysvgroups'}, {@grpquota='grpquota'}, {@rtdev={'rtdev', 0x3d, './file0'}}, {@norecovery='norecovery'}, {@attr2='attr2'}, {@noalign='noalign'}], [{@uid_gt={'uid>', r2}}, {@subj_user={'subj_user'}}, {@obj_user={'obj_user'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@dont_appraise='dont_appraise'}, {@appraise_type='appraise_type=imasig'}]}) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) 09:01:43 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr, 0x60}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:43 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:43 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0) [ 980.886949][ T9881] qrtr: Invalid version 254 09:01:43 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xa6, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:43 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0) [ 980.965770][ T9884] xfs: Unknown parameter 'uid>00000000000000003327' 09:01:43 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:43 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0) 09:01:43 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) 09:01:43 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x9be, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socket$inet6_mptcp(0xa, 0x1, 0x106) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r1, &(0x7f00000017c0), 0x218, 0x0) 09:01:43 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:43 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr, 0x1f4}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:43 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) [ 981.330536][ T9905] qrtr: Invalid version 254 [ 981.365411][ T9909] qrtr: Invalid version 254 09:01:44 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x68022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/107, 0x6b}], 0x1, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$P9_RCLUNK(r3, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x374) setreuid(0x0, r5) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="67696b3d8e8de296552cb08adf7269d77a8753b0d95f0292f1904344628845ff027562f4748cec2e3bfba98a2da32bb0274f04a0b4661a9b9b6563c14408950fce38e43c091f0a9781d8a169dc6a46212f06e85486de20da1318327266c8a70ed4aac82696f3d323030704f949d30cdb58edbf14cbe4f413f637ef0068694411428badf89dd2f1a8d96ee056689527a72f5dd89107", @ANYRESHEX=r7, @ANYBLOB="f4a3f58c04aba51c008400000000fb5d00000000000000"]) write$FUSE_CREATE_OPEN(r2, &(0x7f0000001140)={0xa0, 0x0, 0x2, {{0x2, 0x1, 0x4, 0x100000000, 0x4, 0x1, {0x3, 0x0, 0x80000001, 0x100000001, 0x800, 0x26800, 0xb8, 0x6, 0x7ff, 0x80000000, 0x7fff, r5, r7, 0x72ea, 0x2}}, {0x0, 0x1}}}, 0xa0) 09:01:44 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:44 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:44 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:44 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr, 0x1800}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:44 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x2400, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0x6) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0) 09:01:44 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:44 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:44 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:44 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:44 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$P9_RCLUNK(r5, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="068a322a9987d528e47b95f953747ea4e7928e", @ANYRES16=r3, @ANYBLOB="0b3e2abd70000000000025000000"], 0x14}}, 0x40) ioctl$sock_bt_hci(r1, 0x400448e2, &(0x7f00000012c0)="87a75756580ec9c85c8cd03b3db47a0aada4936934ca6f50a613cfaee1999f1ab9383f6410493c5ebded838925204b290136d064ec1f52c83ca181312a22fe428106dd0da6e96d90ec4ac79e95220714f878fe0ab9b5ad2da5cdd44b36fae4060aa55b13676923aa34641e3500e759cf87c21fe3d26c72512053956913bc0dc1dcccefd4bd0fdb83eea7c6782cc34f6f77d755d1a406eafee3818baa00e8ade45a0f2445fe7ba6b8dddf50e3f74db72e92b492139d03c021abfdaa9df2") sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000001140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2400400}, 0xc, &(0x7f0000000080)={&(0x7f0000001440)={0x18c, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r6, &(0x7f00000017c0), 0x218, 0x0) 09:01:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x10001, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RCLUNK(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r5, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:crontab_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x98, r5, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:admin_passwd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x98}, 0x1, 0x0, 0x0, 0x8801}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:01:44 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr, 0x6000}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:44 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:44 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:45 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x2400, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0x6) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0) 09:01:45 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:45 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:45 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x7, 0xffffffff, 0x9, 0x2, 0x5, "7653202586cf1e139c21b55e5788b0c2e6ff0e", 0x9, 0x101}) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:45 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr, 0xf401}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:45 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x2400, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0x6) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0) 09:01:45 executing program 2: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:45 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:45 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x2400, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0x6) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0) 09:01:45 executing program 2: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:45 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:45 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr, 0x18000000}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:45 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc004, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='cpuset\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RCLUNK(r4, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000040)={0x0, 0x7, 0x1015}) preadv(r2, &(0x7f00000017c0), 0x218, 0x0) 09:01:45 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:46 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:46 executing program 2: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:46 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr, 0x60000000}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:46 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000040)) syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:46 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:46 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:46 executing program 2: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:46 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:46 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:46 executing program 2: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:46 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr, 0xf4010000}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:46 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:46 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:47 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:47 executing program 2: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:47 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001180)='/proc/self/net/pfkey\x00', 0x0, 0x0) mq_getsetattr(r0, &(0x7f00000011c0)={0x9, 0x4, 0x8, 0x8}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000001200)=[@in={0x2, 0x4e21, @local}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x3, @private0, 0x100}], 0x3c) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000001140)={0x1f, 0x9, 0x2}) syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) write$P9_RCLUNK(r5, 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(r5, 0x402c5639, &(0x7f0000000040)={0x8, 0x2, 0x2}) lseek(r2, 0x4, 0x2) preadv(r1, &(0x7f00000017c0), 0x218, 0x0) 09:01:47 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:47 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:47 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:47 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0) 09:01:47 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:47 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0) 09:01:47 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:47 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0) 09:01:47 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:47 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x6, 0xe12}) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) close(r1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r2, &(0x7f00000017c0), 0x218, 0x0) 09:01:47 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x18, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:47 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:47 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0) 09:01:47 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:48 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0) 09:01:48 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:48 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:48 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x60, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:48 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0) 09:01:48 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:48 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:48 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, 0x0, 0x0, 0x0) 09:01:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:48 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:48 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x1f4, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:48 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:48 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, 0x0, 0x0, 0x0) 09:01:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:49 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, 0x0, 0x0, 0x0) 09:01:49 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:49 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141, 0x100, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x17, &(0x7f0000000000)={r5}, 0xc) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000001140)={0x0, 0xfffff738, 0x0, 0xfffe, 0x800, 0x5, 0x1, 0x8000, {r5, @in={{0x2, 0x4e24, @private=0xa010101}}, 0xb5f5, 0x0, 0x3, 0x4, 0x9f}}, &(0x7f0000000080)=0xb0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000040)={0x7, 0x80, 0x3, 0x6, 0xfffffffffffffffe}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x24, 0x0, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x24, 0x0, 0x400, 0x3, 0x25dfdbfc, {}, [@NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x804) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0) 09:01:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:49 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x1800, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:49 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:49 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001180)='/proc/self/net/pfkey\x00', 0x0, 0x0) mq_getsetattr(r0, &(0x7f00000011c0)={0x9, 0x4, 0x8, 0x8}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000001200)=[@in={0x2, 0x4e21, @local}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x3, @private0, 0x100}], 0x3c) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000001140)={0x1f, 0x9, 0x2}) syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) write$P9_RCLUNK(r5, 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(r5, 0x402c5639, &(0x7f0000000040)={0x8, 0x2, 0x2}) lseek(r2, 0x4, 0x2) preadv(r1, &(0x7f00000017c0), 0x218, 0x0) 09:01:49 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/215, 0xd7}, {&(0x7f0000000040)=""/12, 0xc}, {&(0x7f0000000080)=""/36, 0x24}], 0x3, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000240)={'team_slave_0\x00', 0x7ff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r3, &(0x7f00000017c0), 0x218, 0x0) 09:01:49 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:49 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:49 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:49 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001180)='/proc/self/net/pfkey\x00', 0x0, 0x0) mq_getsetattr(r0, &(0x7f00000011c0)={0x9, 0x4, 0x8, 0x8}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000001200)=[@in={0x2, 0x4e21, @local}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x3, @private0, 0x100}], 0x3c) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000001140)={0x1f, 0x9, 0x2}) syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) write$P9_RCLUNK(r5, 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(r5, 0x402c5639, &(0x7f0000000040)={0x8, 0x2, 0x2}) lseek(r2, 0x4, 0x2) preadv(r1, &(0x7f00000017c0), 0x218, 0x0) 09:01:49 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:49 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x6000, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:50 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:50 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:50 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x17, &(0x7f0000000000)={r3}, 0xc) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfed, @loopback, 0x7fffffff, 0x3}, 0x20) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={r3, 0x20}, 0x8) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$P9_RCLUNK(r5, 0x0, 0x0) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0) 09:01:50 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:50 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:50 executing program 4: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:50 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0xf401, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:50 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:50 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:50 executing program 4: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:50 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:50 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:51 executing program 4: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:51 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x18000000, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:51 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:51 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:51 executing program 4: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0) 09:01:51 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:51 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:51 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x60000000, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:51 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4ca7beb264a519fb, 0x0, 0x0, 0x6}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000140)={0x0, 0xd00, &(0x7f0000000500)={&(0x7f0000000040)={0x1c, r2, 0x711, 0x0, 0x0, {0xa, 0x0, 0xd00}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000001180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001140)={&(0x7f0000000080)={0x34, r2, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 09:01:51 executing program 4: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0) 09:01:51 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:51 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:51 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) write$P9_RCLUNK(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040)=0x1, 0x4) 09:01:51 executing program 4: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0) 09:01:51 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:51 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:51 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0xf4010000, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:52 executing program 4: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:52 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r1, 0x406, r2) syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:52 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:52 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:52 executing program 4: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:52 executing program 4: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:52 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:52 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:52 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:52 executing program 4: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:52 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:52 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$FITHAW(r2, 0xc0045878) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, 0x0, 0x400000000000000, 0x8) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f00000012c0)={0x10102}) syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x804) preadv(r3, &(0x7f00000017c0), 0x218, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$P9_RCLUNK(r5, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="28020000030801010000feff9bc673397a31000000007001024060040000"], 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) 09:01:52 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:52 executing program 4: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:52 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:53 executing program 4: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:53 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:53 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x18, 0x0, 0x0, 0x5}, 0x9c) 09:01:53 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) [ 990.552617][T10289] binder: 10282:10289 ioctl 40044591 0 returned -22 09:01:53 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:53 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:53 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) sendto$rose(r2, &(0x7f0000000040)="6988fd8718e9d55d79ec173a44f581d8404febbb283f6409ea7e29a3632a6bd84db38c6ba030b51679a01728fa5f3cf4239c34ca", 0x34, 0x8890, &(0x7f0000000080)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0xffffffff, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:53 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:53 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:53 executing program 4: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:53 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x60, 0x0, 0x0, 0x5}, 0x9c) 09:01:53 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:53 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0) 09:01:53 executing program 4: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:53 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xa101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000040)={0x1000, 0x2000}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r1, &(0x7f00000017c0), 0x218, 0x0) 09:01:53 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:54 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0) 09:01:54 executing program 4: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:54 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x1f4, 0x0, 0x0, 0x5}, 0x9c) 09:01:54 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:54 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0) 09:01:54 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:54 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) fcntl$dupfd(r2, 0x0, r2) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000001180)={0x9b0000, 0x101, 0x3, r2, 0x0, &(0x7f0000001140)={0x9a090b, 0x200, [], @p_u8=&(0x7f0000000080)=0x9}}) bind$tipc(r3, &(0x7f00000011c0)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x2, 0x1}}, 0x10) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(r4, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0xfffffffffffffffa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) preadv(r5, &(0x7f00000017c0), 0x218, 0x0) 09:01:54 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, 0x0, 0x0, 0x0) 09:01:54 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:54 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x1800, 0x0, 0x0, 0x5}, 0x9c) 09:01:54 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:54 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, 0x0, 0x0, 0x0) 09:01:54 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:54 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, 0x0, 0x0, 0x0) 09:01:54 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:55 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:55 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000040)={0x20, 0x364, 0x3, {0x7, 0x40}, 0x4, 0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r2, &(0x7f00000017c0), 0x218, 0x0) 09:01:55 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x6000, 0x0, 0x0, 0x5}, 0x9c) 09:01:55 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0xf401, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:55 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:55 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:55 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000040)=0x20) syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r1, &(0x7f00000017c0), 0x218, 0x0) 09:01:55 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:55 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:55 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0xf401, 0x0, 0x0, 0x5}, 0x9c) 09:01:55 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:55 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:55 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000040)=0x7fffffff) preadv(r1, &(0x7f00000017c0), 0x218, 0x0) 09:01:56 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:56 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:56 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0xf401, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:56 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:56 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:56 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:56 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0xffffffffffffffff}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r2, 0x8}}, 0x10) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4121, 0x1019}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) getrandom(&(0x7f0000000040)=""/90, 0x5a, 0x3) preadv(r3, &(0x7f00000017c0), 0x218, 0x0) 09:01:56 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0xf401, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:01:56 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x18, 0x0, 0x5}, 0x9c) 09:01:56 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:56 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:56 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0) 09:01:56 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:56 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0xfffffbff, 0x2, 0x3, {0xfffffffc, 0x2}, 0x10001, 0x4}) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r1, &(0x7f00000017c0), 0x218, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) fcntl$dupfd(r3, 0x0, r3) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r3, &(0x7f00000011c0)={0x50000000}) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$P9_RCLUNK(r4, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000001200)={0x10001, 0x1, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r5 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r5, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4068aea3, &(0x7f0000001140)={0x7b, 0x0, [0x2, 0x1, 0x3, 0x101]}) 09:01:57 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:57 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0) 09:01:57 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x60, 0x0, 0x5}, 0x9c) 09:01:57 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:57 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0) 09:01:57 executing program 2: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:57 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:57 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, 0x0, 0x0, 0x0) 09:01:57 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x15, r1, 0x0, 0x0) keyctl$revoke(0x3, r1) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000001140)={'syz', 0x1}, &(0x7f0000001180)="eb5d9cba224b1516e5c07d7d9f2853cae4721a2c2b2a947ba54c8fbc3e8a948d2ad603655fca38d9855254c62c5f09f82c664104170b95df37741a5f8ece86b2657f84feebfaf848a0dc655403d6c5b45c42c550cafc756a826b48a2f9df37902e43d1f7732aca7593a3797e233e48c682b6116991d0a00aeac3edce22b4328a829d2721434cf74860b14bc2614b59690daea9dc225baadf866a7629aa8d4f020591edb8ab405f0851528f9eaf50dcd88fff661c2f2aea2d3ae14adfd2bf40785092a9ac200b359dea72621420152874e1b9787708364724041a314cae8bad712364", 0xe2, r1) keyctl$revoke(0x3, r2) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:57 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x1f4, 0x0, 0x5}, 0x9c) 09:01:57 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, 0x0, 0x0, 0x0) 09:01:57 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:58 executing program 2 (fault-call:4 fault-nth:0): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:58 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, 0x0, 0x0, 0x0) 09:01:58 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x5, 0x2, 0x84, 0x9, 0x0, 0x3, 0x20a, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x0, 0x8}, 0x4201, 0x8, 0x6, 0x2, 0xa64, 0x7, 0xfff}, 0x0, 0xa, r0, 0x13e3c0448063db8f) 09:01:58 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:58 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x1800, 0x0, 0x5}, 0x9c) [ 995.645690][T10506] FAULT_INJECTION: forcing a failure. [ 995.645690][T10506] name failslab, interval 1, probability 0, space 0, times 0 [ 995.718036][T10506] CPU: 1 PID: 10506 Comm: syz-executor.2 Not tainted 5.8.0-rc3-syzkaller #0 [ 995.726938][T10506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 995.737020][T10506] Call Trace: [ 995.740349][T10506] dump_stack+0x18f/0x20d [ 995.744710][T10506] should_fail.cold+0x5/0x14 [ 995.749333][T10506] ? rw_copy_check_uvector+0x311/0x390 [ 995.754821][T10506] should_failslab+0x5/0xf [ 995.759479][T10506] __kmalloc+0x27d/0x340 [ 995.763765][T10506] rw_copy_check_uvector+0x311/0x390 [ 995.769091][T10506] import_iovec+0xa6/0x3d0 [ 995.773541][T10506] ? compat_import_iovec+0x3d0/0x3d0 [ 995.778862][T10506] ? __lockdep_free_key_range+0x110/0x110 [ 995.784621][T10506] vfs_readv+0xbb/0x150 [ 995.788812][T10506] ? compat_rw_copy_check_uvector+0x4b0/0x4b0 [ 995.794904][T10506] ? __fget_files+0x272/0x400 [ 995.799619][T10506] ? lock_downgrade+0x820/0x820 [ 995.804511][T10506] ? __fget_files+0x294/0x400 [ 995.809216][T10506] __x64_sys_preadv+0x231/0x310 [ 995.814088][T10506] ? __ia32_sys_writev+0xb0/0xb0 [ 995.819147][T10506] ? lock_is_held_type+0xb0/0xe0 [ 995.824265][T10506] ? do_syscall_64+0x1c/0xe0 [ 995.828885][T10506] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 995.834903][T10506] do_syscall_64+0x60/0xe0 [ 995.839353][T10506] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 995.845267][T10506] RIP: 0033:0x45cb29 [ 995.849405][T10506] Code: Bad RIP value. [ 995.853514][T10506] RSP: 002b:00007fae795c7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 995.861956][T10506] RAX: ffffffffffffffda RBX: 00000000004fb7e0 RCX: 000000000045cb29 [ 995.870064][T10506] RDX: 0000000000000218 RSI: 00000000200017c0 RDI: 0000000000000005 [ 995.878055][T10506] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 995.886050][T10506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 995.894043][T10506] R13: 0000000000000886 R14: 00000000004cb816 R15: 00007fae795c86d4 09:01:58 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:58 executing program 3 (fault-call:3 fault-nth:0): preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:58 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) sendmsg$nl_generic(r0, &(0x7f00000011c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001180)={&(0x7f00000012c0)={0x17c, 0x32, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@generic="541c0fa826e4f6cf8361e93d8ad7db30eb421d9130a7e082071f472b3dcd71878a9fdb200d748ecf083d22128a4968b69b6244dd1ac0013fca7c728ac0fde59d3bc66a371946dbabd5fb8e9b93193544dc82f79d7fbfdcfa3c50f73ae1ac43eccdc726f0194898a2efd299a33be53c88f7bc5d2a0fb68cc1d3b44fccfd038ae12c5651c4ade03674fbef7fe67b549f995aae99d6e695f038c386f8cb8c5fe64b52173e083c05d0cbbe9dfd90467e7cfed0dd414f1f33feb844cefa4dd4f626f8b97b53676573c0c95e41d84c793d", @generic="81e45794e17b59a1abc2111b2ed416e54bc7ac1ad9f175068d14d53186fed4b8cdba4a03cef41cebd9d007a824d1c7c8a09937b0acaec5b0bd249aa1b556a5b60103ba66765d8b5aeceaab70bae3ba8909c4e0833a3f4226afd5bdf4f21c7de900d814a842393739d7116b74a23ce0c6bdcec592f13941f829381ab703e1e69bb08c8749d425e76cc7c085a2daa206b157b113206f84c7"]}, 0x17c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r3, 0x0, 0x0) fsetxattr$security_ima(r3, &(0x7f0000001200)='security.ima\x00', &(0x7f0000001440)=@v2={0x5, 0x0, 0x6, 0xfffffbff, 0x4f, "26cf90f5cca5e6f966b5927864dd7d97692293ada991e0b08bbc56c38ae015c53b915878fa34c2bde66db3a322b08c1bcaac08129f42155a870f60b6e6337831d1e9a57791d44d3d7ac1953867f5d8"}, 0x58, 0x1) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@random={'osx.', '/^#\x00'}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000001580)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x50, 0x3, 0x1, 0x801, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x401, 0x5]}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, [], 0x1}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x40801) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7f, 0x80000) fchdir(r5) [ 996.159596][T10521] FAULT_INJECTION: forcing a failure. [ 996.159596][T10521] name failslab, interval 1, probability 0, space 0, times 0 [ 996.234709][T10521] CPU: 1 PID: 10521 Comm: syz-executor.3 Not tainted 5.8.0-rc3-syzkaller #0 [ 996.243502][T10521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 996.253898][T10521] Call Trace: [ 996.257224][T10521] dump_stack+0x18f/0x20d [ 996.261597][T10521] should_fail.cold+0x5/0x14 [ 996.266223][T10521] ? rw_copy_check_uvector+0x311/0x390 [ 996.271714][T10521] should_failslab+0x5/0xf [ 996.276333][T10521] __kmalloc+0x27d/0x340 [ 996.280610][T10521] rw_copy_check_uvector+0x311/0x390 [ 996.286020][T10521] import_iovec+0xa6/0x3d0 [ 996.290470][T10521] ? compat_import_iovec+0x3d0/0x3d0 [ 996.295786][T10521] ? __lockdep_free_key_range+0x110/0x110 [ 996.301532][T10521] vfs_readv+0xbb/0x150 [ 996.305723][T10521] ? compat_rw_copy_check_uvector+0x4b0/0x4b0 [ 996.311815][T10521] ? __fget_files+0x272/0x400 [ 996.316667][T10521] ? lock_downgrade+0x820/0x820 [ 996.321554][T10521] ? read_seqcount_begin.constprop.0+0x139/0x1f0 [ 996.328125][T10521] ? native_apic_msr_write+0x54/0x80 09:01:58 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x6000, 0x0, 0x5}, 0x9c) [ 996.333444][T10521] ? __fget_files+0x294/0x400 [ 996.338161][T10521] __x64_sys_preadv+0x231/0x310 [ 996.343283][T10521] ? __ia32_sys_writev+0xb0/0xb0 [ 996.348249][T10521] ? lock_is_held_type+0xb0/0xe0 [ 996.353397][T10521] ? do_syscall_64+0x1c/0xe0 [ 996.358023][T10521] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 996.364200][T10521] do_syscall_64+0x60/0xe0 [ 996.368647][T10521] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 996.374570][T10521] RIP: 0033:0x45cb29 [ 996.378608][T10521] Code: Bad RIP value. 09:01:59 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) [ 996.382689][T10521] RSP: 002b:00007fdab39f5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 996.391251][T10521] RAX: ffffffffffffffda RBX: 00000000004fb7e0 RCX: 000000000045cb29 [ 996.399244][T10521] RDX: 0000000000000218 RSI: 00000000200017c0 RDI: 0000000000000004 [ 996.407238][T10521] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 996.415230][T10521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 996.423340][T10521] R13: 0000000000000886 R14: 00000000004cb816 R15: 00007fdab39f66d4 09:01:59 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$P9_RCLUNK(r5, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r6, 0x40044591, 0x0) fcntl$dupfd(r6, 0x0, r6) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x37, 0x6, 0x0, {0x6, 0x6, 0xe, 0x0, '/dev/qrtr-tun\x00'}}, 0x37) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80200, 0x0) r7 = fcntl$dupfd(r3, 0x0, r3) write$P9_RCLUNK(r7, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r7}) 09:01:59 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) [ 996.718107][T10540] qrtr: Invalid version 254 [ 996.903953][T10540] qrtr: Invalid version 254 09:01:59 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:59 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0xf401, 0x0, 0x5}, 0x9c) 09:01:59 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000001140)={0x2, @vbi={0x100, 0x4, 0x401, 0x3234564e, [0x2, 0x101], [0x37, 0x4], 0x1}}) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r1, &(0x7f00000017c0), 0x218, 0x0) 09:01:59 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:01:59 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r2, 0x541c, &(0x7f0000000000)={0x6, 0x71}) 09:01:59 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) [ 997.303632][T10560] qrtr: Invalid version 254 [ 997.384076][T10560] qrtr: Invalid version 254 09:02:00 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:00 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x18000000, 0x0, 0x5}, 0x9c) 09:02:00 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:00 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000000)={r3}, 0xc) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000011c0)={r3, 0x1}, &(0x7f0000001200)=0x8) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x800) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x3a1041, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0700000000e400000000140000000c0007060800020000000000"], 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000001180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001140)={&(0x7f00000012c0)={0x1c4, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "20831d539a862f8fa401e4eb4ecc3e3f53c6ffadcb953694512b7de9de"}}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x83}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xbd9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe66}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfdd8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x873f3e9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40814}, 0x4040) 09:02:00 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x76, 0x0, 0x1, 0x0, 0x0, 0x41c1, 0x28401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r2, &(0x7f00000017c0), 0x218, 0x0) munlockall() r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RCLUNK(r4, 0x0, 0x0) sendto$l2tp(r4, &(0x7f0000000040)="e302eaddd8bedfa35ca686326792e44400ac10db9879f355d8d1343583792ce7ad5a03fae40d99a3e1370393d2c23e7811c59cc1", 0x34, 0x40, &(0x7f0000000080)={0x2, 0x0, @empty, 0x3}, 0x10) 09:02:00 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:00 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:00 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x60000000, 0x0, 0x5}, 0x9c) 09:02:00 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000001140)) r0 = syz_open_dev$dmmidi(&(0x7f00000011c0)='/dev/dmmidi#\x00', 0x40, 0x20000) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000001200)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x800, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000080)) syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r1, &(0x7f00000017c0), 0x218, 0x0) 09:02:00 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0) 09:02:00 executing program 3: getpeername$tipc(0xffffffffffffffff, &(0x7f0000001b00)=@id, &(0x7f0000001b40)=0x10) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x400, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000080)) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = open(&(0x7f0000001a40)='./file0\x00', 0x408000, 0x100) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000001a80)={0xbe3, 0x0, 0x4, 0x0, 0x800, {0x0, 0xea60}, {0x1, 0xc, 0x9, 0x80, 0x4, 0x7f, "e649aae3"}, 0x20000, 0x2, @userptr=0x1, 0x1, 0x0, r0}) r4 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r7 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x24, r6, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f0000001a00)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000019c0)={&(0x7f0000001180)={0x808, r6, 0x20, 0x70bd26, 0x0, {}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1}, @NL80211_ATTR_BSSID={0xa, 0xf5, @multicast}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x2}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x603ee7bb}, @NL80211_ATTR_SCAN_SSIDS={0xc, 0x2d, 0x0, 0x1, [{0x4}, {0x4}]}, @NL80211_ATTR_IE={0x7aa, 0x2a, "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"}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7f}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}]}, 0x808}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0)={0x2}, 0x4) [ 998.195208][T10589] QAT: Invalid ioctl 09:02:00 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0) 09:02:01 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r3, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x50, 0x1406, 0x10, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x50}}, 0x20040801) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000080)) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:01 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0xf4010000, 0x0, 0x5}, 0x9c) 09:02:01 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0) 09:02:01 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000001140)=""/164) 09:02:01 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, 0x0, 0x0, 0x0) 09:02:01 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:02:01 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, 0x0, 0x0, 0x0) 09:02:01 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000040)={0x6, 0x3, 0x3, 0x0, 0x7, 0x6, 0xfa, 0x1f, 0x9, 0x7, 0xf3, 0x2, 0x0, 0x400, 0xfffffff9, 0x81, 0x7, 0x6, 0x1, [], 0x8, 0x7}) syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r1, &(0x7f00000017c0), 0x218, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x9) r2 = semget$private(0x0, 0x2, 0x0) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000340)={{0x3, 0xee01, 0x0, 0x0, 0xee00}}) semctl$GETALL(r2, 0x0, 0xd, &(0x7f00000011c0)=""/4) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f0000001140)={0x1, 0x0, {0x3, 0x800, 0x1007, 0x8, 0x3, 0x8, 0x2, 0x6}}) 09:02:01 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) sendmsg(r1, &(0x7f0000002b00)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000000)="879e5570d1b07cc03fb865e9ee786d4ebe016f32e312e07eb9f5c54e6ee97bf9d55e9b27969e90d7b2375af6bed04bb5636afdae864e3999", 0x38}, {&(0x7f0000001140)="7a832ba4047d638ee47d762147898388ca96893f068a80b2ec436b352d07ac2cc52cf642241b24f3ceda4fdfdae9656bfc9d0f397c8624c3c178535e66a1c301b4e1dc0551976fee265510765843a70eeb954312f83bc77d20308d06d9f7d96677e1df00509ac4af4c7352ef92f31d40e953d1372043784750fb1ee26445eb2206cb7633049f891879600f6c1805a6cc058e8517f397423f6eefb318ef3c6e092b486cf11da27b10599a70f332f02ca9268f7713b5f02d67685ab64e693eca2a5dedc4e2122d974582b56cea35e57f005f881ebb4d38328698c68c96a17844b6f3971dff0e468e3d822e534ae04557a32b7fd638dc", 0xf5}, {&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000000080)="04dc57f8dc5478199da5ca57fb00f08821b0825f5de1e105fd07eb80f605b2e02a990fa09234a23d8a2bda2e0a50ca8debc1b1a48ff80b08a031b1cbe987008c11a7406b4a29c9e192c0b2", 0x4b}, {&(0x7f0000002240)="432bbb0648c28a28b339a1080aff6b99140dcfe40049a4105b76adabc9850e1e270f6199cab74eff3e02dfc578194ae62d5799334739d11cc125a1d1435574a7752fcaec5336cdd1ee0a32fd6f5bbe2b51ba97c6eba6998e2baadb5e860dcb1d3ebaf5df46b98fc2bd175a42d91818085e700e5f730c547797ba5432d6e7a3ea02c6908f8b6f9c4532273c77e49bcccc94aff7def6426d0abf8de522615b4f5b1b9287a34e9110b8cf5202bbc637dd508bfa1270954fc56f80d5a410185ffc324e828eb8", 0xc4}, {&(0x7f0000002340)="d3cd3ef5dd54b5a2288b8cf194b347ed619872afd19fe32bbb08d9863a891d577974c5ea293a73cdd64de9311d16188d049268165f837e4eae48dde7e3009926e6780ccf94ee2ca852ff5fff6d06e2c56616b9085f2d07", 0x57}, {&(0x7f0000002400)="128dcb3b017c8a24", 0x8}, {&(0x7f0000002440)="fca537696f04b4eb3cc66a4f9e58d43fbff6934ad6ffcd6b0da1cffd20a3e77e415a6264476bfbccb7511118b76d8450ddd3fcd75cfb21ff9a63718bc992889bbba8c8e0df4b45d82b36be514dda70f218d03393d69eeb134417d1908190b8a360800bbf34bb963e80e34bcd5559b116e8afb70c50dbfe00a9ddc2780ac5e4327604c7271357c0c7201a0785e62c", 0x8e}, {&(0x7f0000002500)="4e45f0f31d06d378821eebb464d95b3e9ff8238a25bea9cef99328d8aa7562fbbda2f77fa54eacbf8c", 0x29}, {&(0x7f0000002540)="017279e7a302f44f095355b25b2aa7738ee40e223a4c0253762eb18b64db6c27891ce97cbab247f94db93fdbdded9fff16b299ece92c98da200f81cd64c4a76c14c0f4df240d520933ac9d6ccd351fc8afada8bc07", 0x55}], 0xa, &(0x7f0000002680)=[{0x90, 0x109, 0xd3f, "93d6e7a60ed758ca98deb3639a3d5a1fa6900271448e4179c55258768e4f496c10e52ce022483e74cd01763d5221cac6eff041e40f8f7a35fd532ca0e80c62b760eb6fd1324c163392b52262fcf8d42781eeffa7ea754eb53ad788562172a7db09c6e8a2eaa6436cee23e6246b3f422206e208370781b0ddc49d406ed8"}, {0xe0, 0x114, 0x1, "fab6a60996b042e189fbea1ab549196b3ec64f15215afdc88937a7778344ef2c969cb33a24d3d536ff1d87d6aca2e6c213f9f9764aaa45008bd7fc65e6c30150d45c41cb99344878ec01ca870579d633b0baddf4f3074f8f12b825cbb5c3c9bbc65c1a1be560d70ae0152b906d36bac347a9e4b3d9e71c89dd43eb2878dc7e1dd051dd6f9f0c045956c671becba7a7fd3e43a5ae4752c6e5ac1e058f70782754a8907e5bb7a496ef73742372f71b23c4c9984fcf043af8583335f4a42c21d6fac9d455286c5fdf9fac8d5fb8db"}, {0x68, 0x117, 0x3, "5b396feceacb5f3c86676ca85cd834f46f7e3805e8e73c4d18ce3580ab81e0130722015127e0633d3f022a9f0d3286a942d62c414c14c191b15d7b465eacf7304ea0beb68159362d6539941f012c0a0ab5d5d913a577"}, {0x88, 0x109, 0x66bb, "489ecdbced48f925f96b74f88af07ef503395f46203c89c11b27d8d4419c76268931d4726a5b89655356efc4f287925d7478744fa6e11b5e8c94cc03daff301e7fe62091e46aba38c8c1fb22688c30b919da03415989f7dafa581bc7b6a14f132bfda684949c3d595848333bf37e873f15113ddceb"}, {0x90, 0x1, 0x7, "a8d00f64e959e49147fc78c141ee592a90b909bced956f2113dead77075c33827406c6b2379fb4f2079938defe7601c9725e2f5aa0b64bb9c41eea287e60806364e50b2f7bc2e6d0acbefda2aad9f71242353670dd723c56573ff63ee860a2c19b137f61d7c544129ea95ba5cc58d08ebd5e6cce84e29f101c75229fb1"}, {0x98, 0x111, 0xf3c, "02acddfaa3401aac4f1f7e9ab2e53a94d17ab64f2e5180717d192c41d6e29257cb6ab95d3c8791dbd24a40b030ab9f87ad54b84d2a2e0ae0b967a1e643945582606a0303f78606cb22cde3a5de6431827307fcad408896a0dddb5315b6cac3742fa094b3b76bd719a4d4da354f7a324d5f98c24eaca453f4d8dbf8a248162f8a9f26a1a9b96e0e"}, {0xf8, 0x29, 0x0, "944b1f314552089687d9bde64d90b3ebb2d15e23a5413fad6eb076e25aa04febffc4aa940759e2d656ae4846ca147cc28117f1d5a3d55c012ff4445a359fb1f9f5fbde0fecb66e560c6aa647917ec39ed5de95ed027a76f3537deb1a79b03f4cb20005c8bd7989bda955eb4f476df5aa170e301dc484a9f2dd373ec420740a6716b4fffcf467fb0f8c5f80c452f36c1b7abc8d7b709d95320eca89bc1d413f4ffcb85a1bf309ea1100b0794550adcb91b70a8d273dd3810ddb194788a52cc21e390762156ccea598dfbb2b9f045d9cf66c92ec2c358ccfff24fc909e77e5ea4c03e1302a"}], 0x480}, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000002b40)={0x3, [0x2, 0xbaea], 0x3ff}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0) 09:02:01 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, 0x0, 0x0, 0x0) 09:02:01 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x18, 0x5}, 0x9c) 09:02:02 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0x7fff}, 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0xe7a) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:02 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x40000, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) fcntl$dupfd(r0, 0x0, r0) preadv(r0, &(0x7f00000017c0), 0x0, 0x0) 09:02:02 executing program 4: getpeername$tipc(0xffffffffffffffff, &(0x7f0000001b00)=@id, &(0x7f0000001b40)=0x10) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x400, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000080)) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = open(&(0x7f0000001a40)='./file0\x00', 0x408000, 0x100) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000001a80)={0xbe3, 0x0, 0x4, 0x0, 0x800, {0x0, 0xea60}, {0x1, 0xc, 0x9, 0x80, 0x4, 0x7f, "e649aae3"}, 0x20000, 0x2, @userptr=0x1, 0x1, 0x0, r0}) r4 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r7 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x24, r6, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f0000001a00)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000019c0)={&(0x7f0000001180)={0x808, r6, 0x20, 0x70bd26, 0x0, {}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1}, @NL80211_ATTR_BSSID={0xa, 0xf5, @multicast}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x2}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x603ee7bb}, @NL80211_ATTR_SCAN_SSIDS={0xc, 0x2d, 0x0, 0x1, [{0x4}, {0x4}]}, @NL80211_ATTR_IE={0x7aa, 0x2a, "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"}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7f}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}]}, 0x808}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0)={0x2}, 0x4) 09:02:02 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x60, 0x5}, 0x9c) 09:02:02 executing program 4: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$P9_RCLUNK(r5, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r6, 0x40044591, 0x0) fcntl$dupfd(r6, 0x0, r6) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x37, 0x6, 0x0, {0x6, 0x6, 0xe, 0x0, '/dev/qrtr-tun\x00'}}, 0x37) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80200, 0x0) r7 = fcntl$dupfd(r3, 0x0, r3) write$P9_RCLUNK(r7, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r7}) 09:02:02 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r1, &(0x7f00000017c0), 0x218, 0x0) io_setup(0x7, &(0x7f0000000400)=0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) io_submit(r2, 0x1, &(0x7f0000001080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x8, r0, &(0x7f0000000080)="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", 0x1000, 0x1, 0x0, 0x2, r1}]) 09:02:02 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) sendmsg$nl_generic(r0, &(0x7f00000011c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001180)={&(0x7f00000012c0)={0x17c, 0x32, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@generic="541c0fa826e4f6cf8361e93d8ad7db30eb421d9130a7e082071f472b3dcd71878a9fdb200d748ecf083d22128a4968b69b6244dd1ac0013fca7c728ac0fde59d3bc66a371946dbabd5fb8e9b93193544dc82f79d7fbfdcfa3c50f73ae1ac43eccdc726f0194898a2efd299a33be53c88f7bc5d2a0fb68cc1d3b44fccfd038ae12c5651c4ade03674fbef7fe67b549f995aae99d6e695f038c386f8cb8c5fe64b52173e083c05d0cbbe9dfd90467e7cfed0dd414f1f33feb844cefa4dd4f626f8b97b53676573c0c95e41d84c793d", @generic="81e45794e17b59a1abc2111b2ed416e54bc7ac1ad9f175068d14d53186fed4b8cdba4a03cef41cebd9d007a824d1c7c8a09937b0acaec5b0bd249aa1b556a5b60103ba66765d8b5aeceaab70bae3ba8909c4e0833a3f4226afd5bdf4f21c7de900d814a842393739d7116b74a23ce0c6bdcec592f13941f829381ab703e1e69bb08c8749d425e76cc7c085a2daa206b157b113206f84c7"]}, 0x17c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r3, 0x0, 0x0) fsetxattr$security_ima(r3, &(0x7f0000001200)='security.ima\x00', &(0x7f0000001440)=@v2={0x5, 0x0, 0x6, 0xfffffbff, 0x4f, "26cf90f5cca5e6f966b5927864dd7d97692293ada991e0b08bbc56c38ae015c53b915878fa34c2bde66db3a322b08c1bcaac08129f42155a870f60b6e6337831d1e9a57791d44d3d7ac1953867f5d8"}, 0x58, 0x1) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@random={'osx.', '/^#\x00'}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000001580)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x50, 0x3, 0x1, 0x801, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x401, 0x5]}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, [], 0x1}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x40801) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7f, 0x80000) fchdir(r5) [ 999.909288][T10660] qrtr: Invalid version 254 09:02:02 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r1, &(0x7f00000017c0), 0x218, 0x0) io_setup(0x7, &(0x7f0000000400)=0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) io_submit(r2, 0x1, &(0x7f0000001080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x8, r0, &(0x7f0000000080)="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", 0x1000, 0x1, 0x0, 0x2, r1}]) 09:02:02 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x1f4, 0x5}, 0x9c) 09:02:02 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) sendmsg$nl_generic(r0, &(0x7f00000011c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001180)={&(0x7f00000012c0)={0x17c, 0x32, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@generic="541c0fa826e4f6cf8361e93d8ad7db30eb421d9130a7e082071f472b3dcd71878a9fdb200d748ecf083d22128a4968b69b6244dd1ac0013fca7c728ac0fde59d3bc66a371946dbabd5fb8e9b93193544dc82f79d7fbfdcfa3c50f73ae1ac43eccdc726f0194898a2efd299a33be53c88f7bc5d2a0fb68cc1d3b44fccfd038ae12c5651c4ade03674fbef7fe67b549f995aae99d6e695f038c386f8cb8c5fe64b52173e083c05d0cbbe9dfd90467e7cfed0dd414f1f33feb844cefa4dd4f626f8b97b53676573c0c95e41d84c793d", @generic="81e45794e17b59a1abc2111b2ed416e54bc7ac1ad9f175068d14d53186fed4b8cdba4a03cef41cebd9d007a824d1c7c8a09937b0acaec5b0bd249aa1b556a5b60103ba66765d8b5aeceaab70bae3ba8909c4e0833a3f4226afd5bdf4f21c7de900d814a842393739d7116b74a23ce0c6bdcec592f13941f829381ab703e1e69bb08c8749d425e76cc7c085a2daa206b157b113206f84c7"]}, 0x17c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r3, 0x0, 0x0) fsetxattr$security_ima(r3, &(0x7f0000001200)='security.ima\x00', &(0x7f0000001440)=@v2={0x5, 0x0, 0x6, 0xfffffbff, 0x4f, "26cf90f5cca5e6f966b5927864dd7d97692293ada991e0b08bbc56c38ae015c53b915878fa34c2bde66db3a322b08c1bcaac08129f42155a870f60b6e6337831d1e9a57791d44d3d7ac1953867f5d8"}, 0x58, 0x1) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@random={'osx.', '/^#\x00'}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000001580)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x50, 0x3, 0x1, 0x801, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x401, 0x5]}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, [], 0x1}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x40801) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7f, 0x80000) fchdir(r5) 09:02:02 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0xff}, &(0x7f0000000080)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) sendmsg$inet6(r3, &(0x7f0000001340)={&(0x7f0000001200)={0xa, 0x4e23, 0xf7dd, @mcast1, 0x8}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000001240)="f3252d1f3a1bc8e7e48a7584d00f3918825394655eb1c6bcac84a5e9088abd88318e8a0e93c2fd4a644f1f37dc662a215e9c4d03a468dd08a483455e8a84c9c556cccf18f1e134b889bec2ec2dac0d334af1e7af9d6b631864c43c54714ab48cb7557470ae66ef4d6a68878e890820e05e7a0368335b611d2fdd", 0x7a}], 0x1, &(0x7f0000001300)=[@tclass={{0x14, 0x29, 0x43, 0x4}}, @dstopts={{0x20, 0x29, 0x37, {0x6c, 0x0, [], [@enc_lim]}}}], 0x38}, 0x4040001) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000000)={r5}, 0xc) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000001380)={r5, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x17, &(0x7f0000000000)={r6}, 0xc) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000001140)={r2, 0x2, 0xfff, 0x7, 0x3ff, 0xb52, 0x87, 0x7, {r6, @in6={{0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, 0x2, 0x2, 0x7fffffff, 0x4, 0x9}}, &(0x7f00000013c0)=0xb0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r7, &(0x7f00000017c0), 0x218, 0x0) 09:02:03 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x60, 0x5}, 0x9c) 09:02:03 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x1800, 0x5}, 0x9c) 09:02:03 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) sendmsg$nl_generic(r0, &(0x7f00000011c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001180)={&(0x7f00000012c0)={0x17c, 0x32, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@generic="541c0fa826e4f6cf8361e93d8ad7db30eb421d9130a7e082071f472b3dcd71878a9fdb200d748ecf083d22128a4968b69b6244dd1ac0013fca7c728ac0fde59d3bc66a371946dbabd5fb8e9b93193544dc82f79d7fbfdcfa3c50f73ae1ac43eccdc726f0194898a2efd299a33be53c88f7bc5d2a0fb68cc1d3b44fccfd038ae12c5651c4ade03674fbef7fe67b549f995aae99d6e695f038c386f8cb8c5fe64b52173e083c05d0cbbe9dfd90467e7cfed0dd414f1f33feb844cefa4dd4f626f8b97b53676573c0c95e41d84c793d", @generic="81e45794e17b59a1abc2111b2ed416e54bc7ac1ad9f175068d14d53186fed4b8cdba4a03cef41cebd9d007a824d1c7c8a09937b0acaec5b0bd249aa1b556a5b60103ba66765d8b5aeceaab70bae3ba8909c4e0833a3f4226afd5bdf4f21c7de900d814a842393739d7116b74a23ce0c6bdcec592f13941f829381ab703e1e69bb08c8749d425e76cc7c085a2daa206b157b113206f84c7"]}, 0x17c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r3, 0x0, 0x0) fsetxattr$security_ima(r3, &(0x7f0000001200)='security.ima\x00', &(0x7f0000001440)=@v2={0x5, 0x0, 0x6, 0xfffffbff, 0x4f, "26cf90f5cca5e6f966b5927864dd7d97692293ada991e0b08bbc56c38ae015c53b915878fa34c2bde66db3a322b08c1bcaac08129f42155a870f60b6e6337831d1e9a57791d44d3d7ac1953867f5d8"}, 0x58, 0x1) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@random={'osx.', '/^#\x00'}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000001580)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x50, 0x3, 0x1, 0x801, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x401, 0x5]}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, [], 0x1}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x40801) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_dev$binderN(&(0x7f0000001280)='/dev/binder#\x00', 0x0, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7f, 0x80000) fchdir(r5) 09:02:03 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000001140)=0x3, 0x4) r3 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r3, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) r6 = fcntl$dupfd(r5, 0x406, r2) write$P9_RCLUNK(r6, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f00000000c0)={0xd28000, 0x1000, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x990a6c, 0x5bb, [], @value=0x8}}) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000000)) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000001180)='net/rt_cache\x00') preadv(r7, &(0x7f00000017c0), 0x218, 0x0) 09:02:03 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x6000, 0x5}, 0x9c) 09:02:03 executing program 0 (fault-call:3 fault-nth:0): preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:04 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x60, 0x5}, 0x9c) 09:02:04 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:04 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0xf401, 0x5}, 0x9c) 09:02:04 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x2, 0x0) 09:02:04 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x3, 0x0) 09:02:04 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x18000000, 0x5}, 0x9c) 09:02:04 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x4, 0x0) 09:02:04 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x5, 0x0) 09:02:04 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x60000000, 0x5}, 0x9c) 09:02:05 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x60, 0x5}, 0x9c) 09:02:05 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, 0xfffffffffffffffe) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x28, r4, 0xf20aaac1f6a2385f, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x28}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f00000011c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001140)={0x48, r4, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x81}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x14}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x14000014}, 0x0) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r5, 0x40044591, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000001240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) r6 = fcntl$dupfd(r5, 0x0, r5) write$P9_RCLUNK(r6, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000001200)={0x1, 0x19, 0x0, 0x9096, "6e80fe6f4a437a94446bd2a31385d38f8d9c715f4a2b163f36533f22930abb1c"}) 09:02:05 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x6, 0x0) 09:02:05 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x7, 0x0) 09:02:05 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0xf4010000, 0x5}, 0x9c) 09:02:05 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x8, 0x0) 09:02:05 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x9, 0x0) 09:02:05 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x41c1, 0x40120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:05 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xa, 0x0) 09:02:05 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:02:05 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) fcntl$dupfd(r0, 0x0, r0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/15, 0xf}, {&(0x7f0000001140)=""/126, 0x7e}, {&(0x7f00000011c0)=""/175, 0xaf}], 0x3, 0x0) 09:02:05 executing program 4 (fault-call:3 fault-nth:0): preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:05 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xb, 0x0) 09:02:06 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xc, 0x0) [ 1003.618485][T10788] FAULT_INJECTION: forcing a failure. [ 1003.618485][T10788] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.661094][T10788] CPU: 0 PID: 10788 Comm: syz-executor.4 Not tainted 5.8.0-rc3-syzkaller #0 [ 1003.670050][T10788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1003.680133][T10788] Call Trace: [ 1003.683638][T10788] dump_stack+0x18f/0x20d [ 1003.688013][T10788] should_fail.cold+0x5/0x14 [ 1003.692840][T10788] ? rw_copy_check_uvector+0x311/0x390 [ 1003.698326][T10788] should_failslab+0x5/0xf [ 1003.702885][T10788] __kmalloc+0x27d/0x340 [ 1003.707162][T10788] rw_copy_check_uvector+0x311/0x390 [ 1003.712483][T10788] import_iovec+0xa6/0x3d0 [ 1003.716938][T10788] ? compat_import_iovec+0x3d0/0x3d0 [ 1003.722376][T10788] ? __lockdep_free_key_range+0x110/0x110 [ 1003.728232][T10788] vfs_readv+0xbb/0x150 [ 1003.732419][T10788] ? compat_rw_copy_check_uvector+0x4b0/0x4b0 [ 1003.738510][T10788] ? __fget_files+0x272/0x400 [ 1003.743226][T10788] ? lock_downgrade+0x820/0x820 [ 1003.748114][T10788] ? read_seqcount_begin.constprop.0+0x139/0x1f0 [ 1003.754481][T10788] ? native_apic_msr_write+0x54/0x80 [ 1003.759799][T10788] ? __fget_files+0x294/0x400 [ 1003.764627][T10788] __x64_sys_preadv+0x231/0x310 [ 1003.769509][T10788] ? __ia32_sys_writev+0xb0/0xb0 [ 1003.774652][T10788] ? lock_is_held_type+0xb0/0xe0 [ 1003.779617][T10788] ? do_syscall_64+0x1c/0xe0 [ 1003.784240][T10788] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1003.790264][T10788] do_syscall_64+0x60/0xe0 [ 1003.794920][T10788] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1003.800842][T10788] RIP: 0033:0x45cb29 [ 1003.804867][T10788] Code: Bad RIP value. 09:02:06 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$P9_RCLUNK(r3, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000200)={'lo\x00', 0x5}) write$P9_RCLUNK(r4, 0x0, 0x0) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000240)) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/229, 0xe5}) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) fcntl$dupfd(r0, 0x0, r0) preadv(r0, &(0x7f0000000080), 0x0, 0x6) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_bp={0x0}, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r5, &(0x7f00000017c0), 0x218, 0x0) 09:02:06 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5, 0x18}, 0x9c) [ 1003.808952][T10788] RSP: 002b:00007f2519c27c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1003.817387][T10788] RAX: ffffffffffffffda RBX: 00000000004fb7e0 RCX: 000000000045cb29 [ 1003.825391][T10788] RDX: 0000000000000218 RSI: 00000000200017c0 RDI: 0000000000000004 [ 1003.833392][T10788] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1003.841684][T10788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1003.850048][T10788] R13: 0000000000000886 R14: 00000000004cb816 R15: 00007f2519c286d4 09:02:06 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xd, 0x0) 09:02:06 executing program 4 (fault-call:3 fault-nth:1): preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:06 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:06 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xe, 0x0) [ 1004.172368][T10804] FAULT_INJECTION: forcing a failure. [ 1004.172368][T10804] name failslab, interval 1, probability 0, space 0, times 0 [ 1004.239087][T10804] CPU: 0 PID: 10804 Comm: syz-executor.4 Not tainted 5.8.0-rc3-syzkaller #0 [ 1004.247806][T10804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1004.257873][T10804] Call Trace: [ 1004.261183][T10804] dump_stack+0x18f/0x20d [ 1004.265594][T10804] should_fail.cold+0x5/0x14 [ 1004.270203][T10804] should_failslab+0x5/0xf [ 1004.274644][T10804] kmem_cache_alloc_node_trace+0x27d/0x400 [ 1004.280468][T10804] __kmalloc_node+0x38/0x60 [ 1004.284985][T10804] kvmalloc_node+0x61/0xf0 [ 1004.289416][T10804] seq_read+0x743/0x1070 [ 1004.293675][T10804] ? avc_policy_seqno+0x9/0x70 [ 1004.298454][T10804] ? selinux_file_permission+0x92/0x520 [ 1004.304022][T10804] ? seq_hex_dump+0x440/0x440 [ 1004.308781][T10804] proc_reg_read+0x221/0x300 [ 1004.313388][T10804] do_iter_read+0x48e/0x650 [ 1004.317914][T10804] vfs_readv+0xe5/0x150 [ 1004.322080][T10804] ? compat_rw_copy_check_uvector+0x4b0/0x4b0 [ 1004.328159][T10804] ? __fget_files+0x272/0x400 [ 1004.332880][T10804] ? __fget_files+0x294/0x400 [ 1004.337588][T10804] __x64_sys_preadv+0x231/0x310 [ 1004.342455][T10804] ? __ia32_sys_writev+0xb0/0xb0 [ 1004.347494][T10804] ? lock_is_held_type+0xb0/0xe0 [ 1004.352444][T10804] ? do_syscall_64+0x1c/0xe0 [ 1004.357059][T10804] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1004.363059][T10804] do_syscall_64+0x60/0xe0 [ 1004.367490][T10804] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1004.373389][T10804] RIP: 0033:0x45cb29 [ 1004.377279][T10804] Code: Bad RIP value. [ 1004.381346][T10804] RSP: 002b:00007f2519c27c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1004.389850][T10804] RAX: ffffffffffffffda RBX: 00000000004fb7e0 RCX: 000000000045cb29 [ 1004.397828][T10804] RDX: 0000000000000218 RSI: 00000000200017c0 RDI: 0000000000000004 [ 1004.405806][T10804] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1004.413783][T10804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1004.421763][T10804] R13: 0000000000000886 R14: 00000000004cb816 R15: 00007f2519c286d4 09:02:07 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5, 0x60}, 0x9c) 09:02:07 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xf, 0x0) 09:02:07 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000080)=""/31, 0x1f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400443, 0x0) preadv(r2, &(0x7f00000017c0), 0x218, 0x0) 09:02:07 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x10, 0x0) 09:02:07 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1f4}, 0x9c) 09:02:07 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/rt_cache\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000000)) 09:02:07 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x11, 0x0) 09:02:07 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:07 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x12, 0x0) 09:02:07 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) mknod(&(0x7f0000000080)='./file0\x00', 0x2, 0x6) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x802, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000001140)={0xffffff81, [[0x9, 0x5, 0x802, 0x6, 0x9, 0x661, 0xb43d, 0xfffff5ed], [0x7, 0x4, 0xfff, 0x7, 0x10001, 0x2, 0x7, 0x8], [0x101, 0x0, 0x10000, 0x10000, 0x3, 0xfffff801, 0x80, 0xfffffffb]], [], [{0x5, 0xf5, 0x1, 0x1, 0x0, 0x1}, {0x5, 0x100, 0x1, 0x0, 0x0, 0x1}, {0x5, 0x5, 0x0, 0x1, 0x1, 0x1}, {0x25b1fefc, 0x2, 0x1, 0x1}, {0xeafc, 0x6, 0x0, 0x0, 0x1}, {0xb8e8, 0x7, 0x1}, {0x1000, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x6, 0xaec, 0x1}, {0x4, 0x8, 0x0, 0x0, 0x1}, {0x8db, 0x3800, 0x1, 0x1, 0x1}, {0x6, 0x6, 0x1, 0x0, 0x1, 0x1}, {0x7, 0x10000, 0x1, 0x1, 0x1}], [], 0xe88d}) sched_setscheduler(r0, 0x5, &(0x7f0000000000)=0xc9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x20, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r3, &(0x7f00000017c0), 0x218, 0x0) 09:02:07 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1800}, 0x9c) 09:02:07 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x2, 0x0) 09:02:08 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:08 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x13, 0x0) 09:02:08 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x3, 0x0) 09:02:08 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x14, 0x0) 09:02:08 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6000}, 0x9c) 09:02:08 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 09:02:08 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x5, 0x0) 09:02:08 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x15, 0x0) 09:02:08 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x16, 0x0) 09:02:08 executing program 5: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000002c0), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRES16=r0, @ANYRES64], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="50200000000062f6e9a5d02bf5de58aeef00"/28, @ANYRES16=r0, @ANYBLOB="01002ebdf927bd7000fbdbdf25010000000008000200010000000cc90b80050403000500000008001210020000000800020016d2c93a4d4b94d273141c297e331bf33f044c2dcb744ccc0883a30563f73e81cf2a785a6e4de832883c794f2d0f9703d96392ac7f109652245b42b0ef4b81383fb74ed3470cba0c3f71e89dcf51a261ae0e62e6fe2df681f2dbbdf55ff45fdcd760ed3529a09915314c1cb34772f6014329779f755ac5f6b7d6d39e61d4c0f7c01373c569ec0a32cb710f31c61899f25f19419b08c8979f8b2f559d55bb3a2e0c63532a0c4152861c3262bd39f02fd5426ca9de9fb277e2a1485bf4be56472265d8207f4e650bd7eb7d49ed0707658cfc0f186198fb3c5a8748ec2e249c00000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x8c054}, 0x48080) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000a40)=ANY=[@ANYBLOB="6a19119ba4295bc2b02a0b00dc73b8fe70da3f", @ANYRES16=r0, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB="0061a9002200f4f071e690521d79ec2df20a1921292b81a9ff070000185307000000000000009fa1a81e3bdd3b2a22728650938e7081aa8a", @ANYRES16=r0, @ANYBLOB="00032dbd7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x2044011) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="b00100ff", @ANYRES16=r0, @ANYBLOB="00002bbd7000ffdbdf650100000004000c802c0004800500030006000000050003000100000005000300080000000500030006000000050003000700000008010c8014000b800800090012bae65b08000a00c228000024000b800800090035a5b71b08000900bccfaf4608000a0012f8000008000a0098ac000014000b8008000a00f9aa000008000a0004c000001c000b8008000a00c551000108000900d811e136080009008a14551c0c000b8008000900248953271c000b8008000a00178b000008000900d1e1d74f08000900f7b8f96f24000b800800090035fc9d170800090061a4947f08000900ccb23b6f08000a0065ce000004000b804c000b80080009004911722708000a00dc32000008000a005fe3000008000a006fa5000008000a001602000008000900647ba42408000a00310d000008000a0009510000080009005ba5002d0800020001000000240004800500030002000000050003000500000005000300020000000500030000000000300008802c000780080006001000000008000500877e572808000500e77a94210800060078000000080005000bac245608000100ffffffff"], 0x1b0}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4241}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="a4010000", @ANYRES16=r0, @ANYBLOB="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"], 0x1a4}, 0x1, 0x0, 0x0, 0x24044040}, 0x6004) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000c674ad4f8cf84155cbf7a11cbec15b1ddccbf3f0ef01672520d8936516e364f8", @ANYRES16=r0, @ANYBLOB="01002cbd7000fcdbdf25020000002800088024000780080006003300000008000500320e107908000600dc000000080005009b1219360800010000000000"], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, r0, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, r0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x6c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2f01}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x13cd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40951908}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73c6c392}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x383c4445}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1dcc4dd4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcd6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4bf791bd}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x560e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf391}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x567da882}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00012abd7000fddbdf2501000000040004802c000480050003000700000005000300070000000500030007000000050003000000000005000300020000000800010003000000a0000c800c000b8008000a001062000024000b8008000900d406423f08000900f4954b2208000a00ba000000080009007ae8c84724000b8008000900e8847e3908000a00d4090000080009002617711508000a00a17b00000c000b8008000900d30d152e3c000b8008000a001c92000008000a008d7c000008000a0074000000080009001069e94b08000a00003900000800090055baf6680800090035457547"], 0xec}, 0x1, 0x0, 0x0, 0x80}, 0x44010) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) write$P9_RCLUNK(r3, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r3, 0xc0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x7, 0x3}, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x10, 0x5, 0x9}, &(0x7f0000000100)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x80000000}}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) 09:02:08 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x6, 0x0) [ 1006.198373][T10887] qrtr: Invalid version 254 09:02:08 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5, 0xf401}, 0x9c) 09:02:08 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x17, 0x0) [ 1006.271803][ T3614] usb 4-1: new high-speed USB device number 14 using dummy_hcd 09:02:08 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x7, 0x0) 09:02:08 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) fcntl$dupfd(r3, 0x0, r3) r4 = pidfd_getfd(r2, r3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f0000000000)={0x5, 0x1, 0x40, 0xcf0, '\x00', 0x7fffffff}) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) 09:02:09 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x8, 0x0) 09:02:09 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x18, 0x0) [ 1006.551336][T10905] qrtr: Invalid version 254 [ 1006.646547][T10913] qrtr: Invalid version 254 [ 1006.828524][ T3614] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1006.848568][ T3614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.894493][ T3614] usb 4-1: Product: syz [ 1006.898716][ T3614] usb 4-1: Manufacturer: syz [ 1006.928066][ T3614] usb 4-1: SerialNumber: syz 09:02:11 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001280)={r1, 0xc0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x3, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1, 0x3}, 0x0, 0x0, &(0x7f00000000c0)={0x1, 0xd, 0x7ff, 0xed19}, &(0x7f0000001140)=0x3f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=0x9}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0) 09:02:11 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x19, 0x0) 09:02:11 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5, 0x18000000}, 0x9c) 09:02:11 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x9, 0x0) 09:02:11 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$P9_RCLUNK(r2, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000180)=0x1, &(0x7f0000000200)=0x4) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$P9_RCLUNK(r5, 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000080)=0x6, 0x4) r6 = fcntl$dupfd(r3, 0x0, r3) write$P9_RCLUNK(r6, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000100)=@nat={'nat\x00', 0x19, 0x3, 0x422, [0x20000300, 0x0, 0x0, 0x200003d6, 0x20000406], 0x0, &(0x7f0000000040), &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x9, 0x4, 0x15, 'veth1_to_team\x00', 'wg0\x00', 'batadv_slave_1\x00', 'vlan0\x00', @remote, [0x278ac323d3f3f642, 0x0, 0x0, 0xff, 0xff, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10, {{@dev={[], 0x28}, 0x10}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{0x5, 0x5c, 0x448b, 'hsr0\x00', 'batadv_slave_0\x00', 'ip6erspan0\x00', 'tunl0\x00', @local, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @remote, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0x196, 0x196, 0x1ce, [@comment={{'comment\x00', 0x0, 0x100}}], [], @arpreply={'arpreply\x00', 0x10, {{@remote, 0xffffffffffffffff}}}}, {0x5, 0x0, 0x9300, 'bond0\x00', 'hsr0\x00', 'ip6erspan0\x00', 'sit0\x00', @multicast, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0xff, 0xff, 0x8cf4a0d2cf8c74ab], 0xb6, 0xee, 0x11e, [@limit={{'limit\x00', 0x0, 0x20}, {{0x6, 0x9, 0x8, 0xfffffff8, 0x5, 0x7ff}}}], [@snat={'snat\x00', 0x10, {{@random="c12b0852bc67", 0xffffffffffffffff}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x3386}}}}]}]}, 0x49a) r7 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r7, 0x0, 0x0) bind$phonet(r7, &(0x7f0000000000)={0x23, 0x1, 0x0, 0x7}, 0x10) 09:02:11 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000001e80)='/dev/full\x00', 0x42880, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x20008000) write$P9_RCLUNK(r1, 0x0, 0x0) ioctl$VIDIOC_G_ENC_INDEX(0xffffffffffffffff, 0x8818564c, &(0x7f0000002400)) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x8, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RCLUNK(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r4, &(0x7f0000001a00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x14, r5, 0x300, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x28040008}, 0x20004004) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r6, &(0x7f00000017c0), 0x218, 0x0) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) [ 1008.942010][ T3615] usb 4-1: USB disconnect, device number 14 [ 1009.046140][T10933] qrtr: Invalid version 254 09:02:11 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xa, 0x0) 09:02:11 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x1a, 0x0) [ 1009.243149][T10933] qrtr: Invalid version 254 09:02:11 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000780)=""/171, 0xab}, {&(0x7f0000000140)=""/194, 0xc2}, {&(0x7f0000000240)=""/106, 0x6a}], 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x800, 0x5) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="000001e9816b98674f98d61bfe000000000000000000000000000000000000000000006f2d635b038660e54a9106d246459e465f613099b1d5dbd0acdd991f23739df1008d23ba2b5fbe41180d928cfd39e34746cb4d73c08d00ba4110f33233e0aa39dc52c3c41b826e1ea411c9d6cf21b3cbfa70209080546ad5d788a300"/139, @ANYRES32=r4], 0x38}}, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000640)='/dev/autofs\x00', 0x1, 0x0) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000680)={&(0x7f0000fec000/0x12000)=nil, 0x12000}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400210100000019000000000a000000", @ANYRES32=r4, @ANYBLOB="14000100ff0200000000000000000000000000010800080019060000"], 0x34}}, 0x40) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x2c, 0x6, r4, 0x11}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000340)='S{', 0x2}, {&(0x7f0000000380)="a2c2975fc45c892e4cdb1002da66319545ed390eb0f9ac302a908548d7ebd179abac5902ecb642191e6c82cd2ac366ab738cf7d70a06cd40a6af661bcae4505aa4f8db6ad2b590e076daeeb9db3b38dc589f7a3f74cb670cc9f41fc3a3949ba0", 0x60}, {&(0x7f0000000400)="99aac9b06e730da3ae4da7b512957d5d891b27ce0f6a1167a4acd18b8dc25c8d0e8eb011be2e26b6ddbb35f5f43bd978c94fcd9b795b73009338f12acacbf18aeb423ef7d9ac553a3977abed4276d2dbd135302abc80f6ff8f7b1cd94704a0b6710a6553723d0073b7b32acf70bb70af5894194e807ae698ef1de92d60", 0x7d}, {&(0x7f0000000480)="69123927cac92a79793d81c0b7149e0c63781124130644b7c6e9bfd9981c116589cd485471893fb3de3820407730f446aa409c05252c73a5a0b3e0063fb947ca000043c6fe8cef14", 0x48}, {&(0x7f0000000500)="5bf49640f6aa7c03723da69e5f2ee4b5b3dd321916864449d46df1dfb7dab9d9398f2b655626e4f05735b9d3f4ba72a7c6ef9efe2ac0421fcd7fd7b3f68f343a1f4e171ea3ca1250b66a050d338695c86d8434941ead073b70dff42a4d76", 0x5e}], 0x5, 0x0, 0x0, 0x80}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r6, &(0x7f00000017c0), 0x218, 0x0) 09:02:11 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x1b, 0x0) 09:02:11 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) prlimit64(r2, 0xb, &(0x7f0000001140)={0x3, 0x8}, &(0x7f0000001180)) ptrace$cont(0x7, r1, 0x0, 0x0) ptrace$cont(0x1f, r1, 0x0, 0x80000) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x4, 0x5, 0x8000000, 0x8}, r0, 0x1, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r3, &(0x7f00000017c0), 0x218, 0x0) 09:02:12 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5, 0x60000000}, 0x9c) [ 1009.430726][T10956] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 09:02:12 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xb, 0x0) 09:02:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000001480)={0x0, 0xfff, 0x1, 'queue1\x00', 0x80000001}) r3 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r3, 0x0, 0x0) setsockopt$RDS_RECVERR(r3, 0x114, 0x5, &(0x7f0000000000)=0x1, 0x4) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x760741bd, 0x0, @perf_bp={0x0}}, 0x0, 0xe, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001440)=[@in6={0xa, 0xec17, 0x9, @private0={0xfc, 0x0, [], 0x1}, 0x8}, @in6={0xa, 0x4e24, 0x9, @empty, 0x9}], 0x38) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') socket$inet6_udp(0xa, 0x2, 0x0) preadv(r4, &(0x7f00000017c0), 0x218, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000001540)=0x79e, 0x4) preadv(r4, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/106, 0x6a}, {&(0x7f0000001140)=""/100, 0x64}, {&(0x7f00000011c0)=""/167, 0xa7}, {&(0x7f0000001280)=""/150, 0x96}, {&(0x7f0000001340)=""/29, 0x1d}, {&(0x7f0000001380)=""/40, 0x28}], 0x6, 0x1000) [ 1009.532201][T10959] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 09:02:12 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001200)='/dev/zero\x00', 0x301140, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000001240)) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f00000011c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x7f96845976c857b}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x38, r3, 0xa00, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x20}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040800}, 0x40004) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0) 09:02:12 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x1c, 0x0) 09:02:12 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xc, 0x0) 09:02:12 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x1d, 0x0) 09:02:12 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xd, 0x0) 09:02:12 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') syncfs(r0) getpid() preadv(r1, &(0x7f00000017c0), 0x218, 0x0) 09:02:12 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) preadv(r1, &(0x7f00000017c0), 0x218, 0x0) 09:02:12 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5, 0xf4010000}, 0x9c) 09:02:12 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xe, 0x0) 09:02:12 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x1e, 0x0) 09:02:12 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:12 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:12 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:02:13 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xf, 0x0) 09:02:13 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x21, 0x0) 09:02:13 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:13 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x10, 0x0) 09:02:13 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x11, 0x0) 09:02:13 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x22, 0x0) 09:02:13 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) fcntl$dupfd(r2, 0x0, r2) preadv(r2, &(0x7f00000017c0), 0x0, 0x3ff) 09:02:13 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) ioctl$int_out(r1, 0x2, &(0x7f0000000000)) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RCLUNK(r4, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000001140)={'#! ', './file0', [{0x20, '^-'}, {0x20, '['}, {0x20, '<'}, {0x20, '\\'}, {0x20, '/dev/input/event#\x00'}, {0x20, '/dev/input/event#\x00'}, {0x20, '+'}, {0x20, 'net/rt_cache\x00'}], 0xa, "3b3f5fd045cb8895f84024e62dd7c8e776836aec9f129391caacd6f5f26159184d6a92f47317d837af2050ac935a33136f7d5c70366e1c026293493d478702f173e58edd97b077f4606dc01df719cabc1dcc7897afe5f0bc"}, 0xa2) r5 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x7, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x1119}, 0x0, 0xffffffffffffffff, r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') ioctl$INOTIFY_IOC_SETNEXTWD(r6, 0x40044900, 0x9) preadv(r6, &(0x7f00000017c0), 0x218, 0x0) 09:02:13 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x12, 0x0) 09:02:13 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x18}, 0x9c) 09:02:13 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x13, 0x0) 09:02:13 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x23, 0x0) 09:02:13 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000080)=0x36, 0x8) perf_event_open(&(0x7f00000011c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x224a, 0x0, 0xfff9}, 0x0, 0xfffffffffffffffb, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f00000000c0)=""/17) 09:02:13 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x24, 0x0) 09:02:13 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000012c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001280)={&(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0xc004}, 0x44010) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0) r3 = mq_open(&(0x7f0000000000)='\'\x00', 0x80, 0x8d, &(0x7f0000000080)={0x200, 0x5, 0x3, 0x9}) write$binfmt_script(r3, &(0x7f0000001140)={'#! ', './file0', [{}, {0x20, 'net/rt_cache\x00'}, {0x20, ':'}, {0x20, 'net/rt_cache\x00'}, {}], 0xa, "673200abb194c18f9c51ca3a2357b4fad96e33ebd61f39295e6122a68e2930c173a9353a885f5577f3f5409e936b5b56249f1c7d5d8f445329cbcbb7fcbb12dc3ac31e9db8642dae8e84bce3130bdf48700d9b9483d022e57e70e3a6f447f0313f163c520c2b8daa123e11889c0d0556f52677330430f076a8882f5b83c36ff5975157ee45b3fcedc65ae181"}, 0xb7) 09:02:13 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x14, 0x0) 09:02:13 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:14 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x25, 0x0) 09:02:14 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x15, 0x0) 09:02:14 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x60}, 0x9c) 09:02:14 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x26, 0x0) 09:02:14 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) ioctl$SOUND_MIXER_INFO(r0, 0x805c4d65, &(0x7f0000001200)) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000001140)=0x8) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000080)=0xdac, &(0x7f00000000c0)=0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000001180)='trusted.overlay.opaque\x00', &(0x7f00000011c0)='y\x00', 0x2, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0) 09:02:14 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x101, 0x2, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x8001, 0x80001) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x1, r1}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0) 09:02:14 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x16, 0x0) 09:02:14 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:14 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x27, 0x0) 09:02:14 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x17, 0x0) 09:02:14 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) write$9p(r2, &(0x7f0000001140)="8c4ba6c2977f67137bbe5c806d17e3a85ec73ba55c30f12f9bcdebcfe8744fcba1497c1fac1151445fefcd4d84808dab416a251ab73b91218ab53e26e1f84845ce5d8ed0febabe521de851c7178c026ebb0accfcf3dec54639c0525193cbeaab9345e654de31a6fd87a6aa1b1a5911357dd058ceb48de9505b0bf8e00b5c20b0123f3706f82a2e9cf8444fa448b0f53c38862a835506452f8a13653361953a8f467819af73502fce77916f12d859ea7560f8a0ba6105ebe155205855007fb713bf4a143a22b647a098c09fa7100a95d3acc75d96d91a40898583b5a63cc152f075", 0xe1) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RCLUNK(r4, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000080)={0x56, 0x8, 0x1, {0x0, 0x40}, {0xf81, 0x1ff}, @ramp={0x6, 0x0, {0x40c, 0x0, 0xcc, 0x1}}}) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x17, &(0x7f0000000000)={r7}, 0xc) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:14 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x28, 0x0) 09:02:14 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x2000015c) 09:02:14 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x18, 0x0) 09:02:14 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x8000, 0x0, 0x0, 0x0, 0x7ffc}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) ioctl$sock_proto_private(r1, 0x89eb, &(0x7f0000000080)="fc9bd248c06c3b555e28a377f3b4926cdd27470cd5ba0c81cd06af11db69f16d98cf58842e2808d0f0b2fc98994ea39e73d8479a") r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0) 09:02:15 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x29, 0x0) 09:02:15 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x19, 0x0) 09:02:15 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) syz_emit_ethernet(0x22, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr=0x64010102, @dev}}}}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0xa5a1, 0xfff, 0x2, 0x4, 0x7, 0x101, 0x1ff, 0x1, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000001140)={r3, 0xfffffffa}, &(0x7f0000001180)=0x8) 09:02:15 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x2a, 0x0) 09:02:15 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x1a, 0x0) 09:02:15 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0xa2) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f00000000c0)=0x98) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r1, &(0x7f00000017c0), 0x218, 0x0) 09:02:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) listen(r4, 0x4000000043) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000040)="6f6f5d6f2d982bfe2b953844155f09a043bb6fa4dbfc61e7d9f969a043b5b1df38490aa12f633324cccd10d832acd1cad201215fb3e3756bcef1a311e75b9f4ba25d1b103052f44ec96ac74b0aedf1aba6a005d4f37a66c430536dfcff4ad5f466d8d95d263048f959ee50a60ece347a86d5b1834ae3aa5748173090fc5736", 0x7f, 0x800, &(0x7f0000000180)={0xa, 0x4e23, 0x7, @private1, 0x8}, 0x1c) sendto$inet6(r5, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r5, 0x2) r6 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r6, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:02:15 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x1b, 0x0) 09:02:15 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)=""/148}, {&(0x7f0000000140)=""/177}], 0x10000120, 0xfffffffffffffffc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:15 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x2b, 0x0) 09:02:15 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x4161, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0) 09:02:15 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x2c, 0x0) 09:02:15 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x1c, 0x0) 09:02:15 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:15 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xe4) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r3, 0x3}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000040)={r3, &(0x7f0000000000)=""/17}) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) writev(r4, &(0x7f00000002c0), 0x0) 09:02:16 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001, 0x5}, 0x0, 0x0, 0x0, 0x5, 0x405}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0) 09:02:16 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x2d, 0x0) 09:02:16 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x1d, 0x0) 09:02:16 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$P9_RCLUNK(r1, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r3, 0x0, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2, 0x8, 0x2, 0x4000, r3}) ioctl$int_out(r4, 0x5460, &(0x7f0000000080)) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r5, 0x2) r6 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r6, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:02:16 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x1}], 0x1) 09:02:16 executing program 3: eventfd2(0x7ff, 0x800) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000001140)={{0x0, 0x0, @reserved="9a91255f8f9c9d97ae4bbfe156676a4c816c9061e68c5f6285e09dba5c866f67"}, 0x5f, r2, [], "2eff3ccc78426c5c8b6919fd76d6a89a300390d97cab10fba704f725cbd741ab2607f1235fbacc39c1453a718b71dfa06b9d6d0c001790bfa9e9b4ffb2c37cdc179f364862cb5b8378b9f8c21191fce94feee3d748b648a08176f67d63c885"}) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:16 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x2e, 0x0) 09:02:16 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'vlan0\x00', @remote}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x327902, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000100)={0xeb, 0xfff, 0x3ff, 0x3, 0x16, "f2f7998970055d47"}) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000140)={0x8, 0x7, 0xb9, 0x1, 0x5, 0x80, 0xff, 0x0, 0x1, 0x1, 0x3, 0x3, 0x9, 0x80}, 0xe) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:16 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x1e, 0x0) 09:02:16 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x21, 0x0) [ 1014.088308][T11207] encrypted_key: insufficient parameters specified 09:02:16 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x2f, 0x0) 09:02:16 executing program 5: openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x20000, 0x8, 0x8}, 0x18) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)}], 0x1) [ 1014.129421][T11197] binder: 11193:11197 ioctl c0506617 20001140 returned -22 09:02:16 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xbd}, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x1f, 0x0, 0x1, 0x0, 0x1}, 0x8) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) [ 1014.242400][T11197] encrypted_key: master key parameter 'Destination' is invalid [ 1014.257537][T11207] binder: 11193:11207 ioctl c0506617 20001140 returned -22 09:02:16 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x22, 0x0) 09:02:17 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x30, 0x0) 09:02:17 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r3, 0x0, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) shutdown(r1, 0x2) r4 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r4, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:02:17 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x1000000, 0x4) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0) 09:02:17 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000040)=0x1, 0x4) write$P9_RCLUNK(r2, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) 09:02:17 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:17 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x23, 0x0) 09:02:17 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x31, 0x0) [ 1014.980515][T11244] qrtr: Invalid version 254 09:02:17 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x24, 0x0) [ 1015.052168][T11252] qrtr: Invalid version 254 09:02:17 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x32, 0x0) 09:02:17 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x9c}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r2 = syz_open_dev$radio(&(0x7f0000001140)='/dev/radio#\x00', 0x2, 0x2) vmsplice(r2, &(0x7f00000014c0)=[{&(0x7f0000001180)="e93519cd41cc31f2ee98e38d8a5c07d1b33271eb28246ddac6aa74c8883a62235e57a8a1ef2bc25d2850c53327f11ad2e99495e1b6880df11faa8ae6ffd4613caad2b57081ce3d968dc689b5c4633ca30beee53371a87ece9b5a4aa808400d8ac0720bbd42f31566831b0bab071ac8dd5a84c88eac0f31dfca00af3f78b8166e03cccef5ec6ed541c0a1b3ad368b1a62cff7e1e155645e2f5c60039d5c6df1bfe076d79dbc5dc1282810e01350d37bd9", 0xb0}, {&(0x7f0000001240)="2d71a910161ff1a6cb170f179a0f8006c1fe81cbf01157636feb44aa22f6780f5beae403a27997c9d0cbf94ec0cc492bf653f5860c0851153d5355d80c1bf1256ae0a8a1c3c671497b6b7d1dbed9a232aad4653a1cb26d5bfd12618cb8e91875be4c9fb7b5890f15cfba62ee6a6db0f7c74e6abfc69d7c83b7b7bd783016c8e4c0c21685c4483587283a08ef9a0aad2437d438f0ec0f032bbbcff5ca649050814e7389a97b21af1ff03566d59f6e74701b0bca46642823c2f2b766f1b5dd4c9404cead0a77b755da2cdf7c24f8c0c612bf497b0c", 0xd4}, {&(0x7f0000001340)}, {&(0x7f0000001380)="2bd208b764f030b59d9cdc9313dabfd7957ccfd80f52525298e71aa7ec9b47d67b84d77e2bdf39f0f2d1f69d5248d572f15c6ef65be09b3732b961d6be83007015e1b084675a3cb82b03d9b89b3b41b065010c9eeacec4856c5596a339c29563971af490a5b1362427acfb4e4d6dd0da1a36b733c409cf435e6bed1103fa4be56075b7b0509e0a95b586c2b71c51e7237166afce45e8724dc8dc2109281f7fca0cdd894558e150070c851867152a5e38795c9fdcceb529ebfd72a64609c299c161f73e46d6c0fb6b", 0xc8}, {&(0x7f0000002400)="ba40f2594e32a6b39aaa1ec31aa47b9714043caa4d3c3889d1e05f983f79a40c0f9dec4a2d1a8a500c85ed8330900a33c77c89011efa4e0d8c55a8c947566c2cb2f1906ccc29677ddb6dd472fff3332aa31dc99f22143988bdbd43c4fad0678274f195a488e306454a89e8212d06595412a8fd50f03aceb7f2bfe98dab6811846286fefbb98684e47d525c46ab8e6cc47b6b4872cdcbc8d1037fcb2329e39cb2f6a7d71e025456fa6b68426e94e650d40b2e60bea356f457b507f17b7854748bdeb7ce115bfdfb8437b6119c8b60a5971a1b8b3d2bcd945d27dda0d356506b55b8d2f9eb7819cda9d3704e35458d188e6a7d527db410857791023896d28dc038178f842e16de1fd0e178809461a6cd55f4163d04bbdbea8fcb10696a62d25a05a62ad4f70d3ca7a539c9a8ad02ff4042899254a308a54aa018f046af9ab55553684fa5c4090e9559bab18c7c0138437b30ddad6062968ef8cd5cbb48fca86f55d9c20eff06f8b3a7fc2ed94f8e40358fa637e44d0a7a98e391de8eb7ce377d10aaecd5ddcc14338e7d047e3309b870782ecf7dc6268b8e3b486e8312e4476b00d8562b1f074a9aa0e156d11dbc11fe439f91efad9a862cd5264aa2336065dded265404d3af00c4ebb296a328ad32b54a4961b83e273cad7fec91f3cac88f3a5d33565d3ca22dda3247f5a2253face60f8f7a675c83930d5d4f85a7735df18966dbd74e2d98eac8b93b9ad17cf53e7ad23c11db6a8f8c96d0207f82154ae769857146fd6176228ab8d5b482b6333ef3632dc6a99e03eac6ecfe1a19afba8818a858b4f08d1d6445276fce1a31ac0d5c9b5d2be96625014ddb307bacf82da5bffebb2237fc93084928a2eb20d6ec7740835a156d5b3b3e8185885cc618c8334d442d9281116795caa5697e62bf47d96b458d33eef3d71b21c0e325cdc68a75e4236abf3b49ef8e0869a81de0820618710e1da1f54d3341d2585d241accee2393723434357791a0cc765f0e6bcf39b9baef9624a5f40e7db7b6ab9c244f91bfb617d0485d71c4ab212bd248d89e593553b5c97bc82a076affdeb21319cc09dc5edcb666986ab1da8d78c692f33b5aadc594953c95f1838c417ec12d1649d069c959890a2336678a11cd86321c0e76ef7e83a0fd83292f0b7fb1967587d9079f94ab3627b222b7d094995d4c505e3dd3168226aa31a59ea3dbd629a865edbf6d46732be259ff4545d22f54b0100d9ffbfab315f927f3d77e9815390b5582a8477de7ad2e0d7a98e3e3bb4e300ac8170976d7d681358ab7b235e396af2efd759d2dd39532f7f8016c74dc7170a1cfffcdf1150118209ee07d86d6c66465dc2b756d4bd02ba0fb45e6e9ce863673a90d24b339aa188240f129845d55eec53a07b7ca64db6b027208410b34bb29cf2d070138e5e64e0e84fd53e76a9a565abce6c4352c0bf49bd074a10be0348430d5dd071ffd6ea51432f1deafb4c368c553a0379bece99a0f44f24778f4156555c47c85b413ba41494b72150afd5f79fde59eb04cb2dafd392657093ec6a7399bc786eeae23259e8436b5c52ee31e04c0ad50c63af25974d8ca90675d1671fa245a2c39408285064de98cdb15f3afd7c65af408806cfa125b9d1561376dc9bcc289c19cabaaad57cd11645ed0e1d668dfc5512fb2ce8bc70f53eefcd9a5b1b1e1db0ad1398aff7e991df94f48a4571e68cf74beccad373814b3a629a629c1e63b52546bf8c8603e87dc39c76c712b4c4f3cdc5b68e0cc2c29e9d5bccfeedcb8ad0d1372fd5798ca5fda8d2a01ee5a89f059a3ec25a2a42298fe1306bc90877ad960d458d253cd0041cf1146fa69054f501ff9717a5332a31da5d3bd540fc22e37ff0d5a2631118e8e1ec2aafe239039b4e783339c855b18b30ef69341dc453718561af265152da327419056e7f0d9c005a5a3e4cb658abe083510433ef476123f1a5a165acf2eef665b57d1e51e448744f4c3f593c98da93cb4739da99c26cce53c49738c206a7d3c8aa89413cde35195c9285647e2d2607985e2f9f82e2e26c71c9868b2d879bd6cadf7c9d2024d179fa0495045646d587ede63cc7e9c55682b07ca6f72e1a75f2ceb313f3fdf351769e49ad152a6f76eb820bf1d83baa13615674653333f6201b6e19c0ba0659e0ab522ab4146928a8fc261470206735efb59ef27940126bbc4c0787b9adc82f5ed5704d642a3a37f6dfc87b6fb1580a079f95e43acab246cb4e40fcf571aaafd88693eb7d7bf029d1300975fcddfba4d5f66bbe8bb1883d46a9db161defddb33a0f3fe1a501e7009c9739be39c371c740a96e2adc2e2390b9ef1fa14c0f7015d3b66e051f602446a3e3458a3cfc6fb84994bc07a78094d0bd6f4afca7d9a081623b184ec9625661da4a39393e75bba077f181bb8d7796d8056962f4b11dc1732eed317e2d25a0b4c5187fd1554e043fd7271cbda89d3ca6aba410aba79c02d731cc2200f4adb6cf402fc414d69ad099bf7a02b80467c00fdc47f1d7e90fe592281fb6697f821be077155a4dd75b052177fe6c0f3e4cb451123adbcb08fa65e91c7cbceaef342395fcf7867a222c39e693040ac70ce0a04e1064a364f226c41cdefb5d6b9ac8c7750969eb9cc9e46f663aa967db1b42f57ccfcee8ec161bc39443db90aa80e5ebca56d68b0b81e6e85550c01c857eca3eb714b9885e2dd053d6cc52a8f54281615dd2843c4b769cfba30943b733a782814d2f85cf602a2f356343881cff317fd6566bfe5eb430b5adf3f2e79cb7652ab530945e534ea7bd7357b0c25bc00833d042c898ca7728905532972092e2d3da288fab3acdecefa7324cb416735c16d536074a76fb5a86415e6f959590c949c6b46ea318ca5d66036905a31c1c981c8284e61774a621677be2d7fea9d93ce49d09a7c741f4d6eb078fd69b6202f103948399e900210892e2cfcc6bdce953d20d5e9988bbbaaa6e201f9b5d314db7dc375027299270a54d2dd0e77e256fc29ecebef7906773ac46c04e40118cd41bef747b9e78f5e3590c8d41b359e2de09ea934198165e5e44a94a16373ad10d70bfa9022596ed34f80f75ea5b666246d3bff4d83cac138131cd213cd4299d3f24bf97ac528d390bcc3e15c40b69bf46a8a0b9ad2cf037146c941e68d80332d941b95c2b51c7de1c8d022984c3f11efd27ee2bc48a21d83a0686a8a638e90525b2430810cc72e0b50ae95f5f7be1702e1adcabb5e3769563933426c2b09aadd46a2b90289ea8ec5208c311b3e10734d79a1fb36a9a5f7a69573f38ff11c5301806629541dec037134a14ff4756fda81fbb9e403b3f3e09bbd89495b9f1889dddee0198dcaec95cc081353eb9df056fe9421fac372c7f2b6a59a532b008f7249edf44aabf260ceab55b075be1c64e7d9c1258a3d59dd944b0ec4372766e2006cdbd4e1e393e9f9cc88060d330a93b45980a516fe7129a4a42371ed382b946c3cde1ac8769e19687b04b263c97678d91684a67a5146c21661521d801ba17e6fa59c78e9c8403f38b3296538c63c9981fc8481bf813401b503c3a5d65f051269a043fb95f79a71e6e23b0a3724baf7ca038dd34d44540523250ef2a1eb2a303fe6f6f9ab30221e1c549a458d21ac5a837654984e0d0bcecfc3af9c6466964a352f4dfddeff6232329f191e7946b96425812fbe09b24fd099e2402f1573c0b7d60f43690c44785a629543219f2f54f97195727a4b5f78fb783aa3694ae446ceb21f805d4a4924ea1154cc1d5880abea2d061837c5e52867801c1905287327d28517eafa6ec3dbe9dfa5d43cf133ee23b196aafcaaca7b1ea4a3736b0806e8dea88fd7431b18710a50aef8f54efbb00eeb6865cb06b7f0a591a34070b647ca8f451ad47cee3438d6204bf11bf29b513fab4f4446ac0249a5251cfdbe069b3ae9aa58077f11e2daa2d40483bb047b166b36d7dc434818c15ba9f9ff0d1d046753cbbc4f874d126c2796e0e9f04fe1a1c524a97102937d00258f621edb2b1aa2df871891e95b032a88af9894d235b0a6a83a08ad30ba26a27fb6d30783a9dcd549b781a6603f16797edce990d5250d32d7b9b8bc0d246b7be1b19cc8858dca39ffd6b8382b7cd44a06c099c7d48588f4b91c2cc07c93f3ee1c91a7c7c0ac4a9cfeebad6d428ce3d12bd8b5be68fa9ee3015480d1cefe21b7bb859c2e1d97904c77018f76c38974b610ebacb7c656a5f73fdc3db1d1078ddf64c1f6484c214e8b2258d95cb076f818bf50e753b52fd3abb26907405fb94711cd212e102842597e51ac862425293feb4372ae220bf1112fee432bfe1e7d830c7f47f77671f42f1082a814f1a5bae6322ad7aeac62d6947d406a4f63c9d894d58388e8fe690cf05f116bc1225acad3bc38d9b9c856a168b423dc0c99516a8f05df8b733e6a313bc310487e03422854988962f1dd3fa863d39f4c4454f4a4941c9da4ebdb32c04f3d72bdafb1683e468a97364be156a73925bd752a50863888a21ac970362b3b1cd32ae8692a9f7cf52521bcaac6410665aec2801b6b76f4dcb36a0e18e4d3dcba55b91197e9dd12767c1a51c8bdcd4dec89be0d730ac123016f2f4b8e1601aa9c74aa5e5d9afb1a2c78f1b88e14a1cccd38b829701022969e5f99db6aec7c2856a531ca5301ae229431f072f66b015c307c2fe75682cef0a55e90e7e5192a12d9efd77e1a6f1936ef8d5d2d40edc46ca43efbea0ddff75caa8bc3cd171f62a9a124c25b3fcb52fd116af6ce7a03f0055d300b61af08ce5d1479e154d677cef2dc525e7ce38bab334532d9e40f2f42e547a6fae725c14b5beab0428261fefb4410b79f5c9bcca20611bbb27d8ddb2b136215621c2fb145e53e6c19fa55260d714919add50714ab8a621152b25d426bdce1c40d32969ae4c51e75dcf4c32e6f1ddbaf6544277bab8c6e5b90539fed0ae10f910e72cea50e498e582eb61a4e4b9886ec6076469f87956d0830c912639b8a9f5690d71fd92dee09490998804ec0ec69cc246696b29d0567ca384e99d3e71a0b58fab19b21ffd0d950b68da1140392a9a87ebf5e190c42a7b54a3d9eab6fd00a18cb142feb76a716534f53768c0f13f8c796d547be56f07569dbaa21cc4e3655538dc99b9e85990fde8c24dfa3464a83aedc9185d5310e4958eb8f77e268df21ca95897b02092e40c479d15a812372f5ca4f0fd9ca7c318d1487f02ec4d58fc15021eec065a536dc95449a7bf6e71c737381233e897c19a27645d2c2acc875256df5b96f587e3b8f429dc6f0c773a69ff10d8b35d8c2395ea7d8cdd202d7d2f17bfcaa981b203fa80bff7b2fd1ae5a1e824fbe2436e355d3258f799770f685bd43618bc6ccd80f3887d2a0ff3e9fb75dc93efa01be5523142a05b45ec155269a2c4d40d20da779b9d2d950336dafa16fc56a929b7834764cf3a27f4b6e61ef1c68b6f2c91f3c0eb2d700d853a0560c44b47729ae2a06a31f070cde681858dc4cb0f107e66a54f5500e4446979df5a5db861ee0cb4ac119ca00518390e00076c7b296321453c6d76cd93fd0a8a1f442cef849aff89438f9bc9df1babe1fedc8b0f1b45cefd12726bd50e29e10916e76b483ac61ba1263b6a1d263bf9e6cfb454c7ed4312b0de6909283cb1c4a909ea5c784e9d9451b8cc36d6927acf633adbb4d99d9324d8134ace9a02a39cccd46e78990d797763a2232fb5b898c575be41070809e7e6f691c22c2ed20e4a0a5e2409e6a18699f72563b218b392fe26b1a807c6bfcd494e5847498f01fc8e3cddf30d5ff7074bb7d9a15d44a", 0x1000}, {&(0x7f0000001480)="3d4ebf337e383837aac1c2cf7baabccd9707e8dc7cdefc9250b5aa16e2a0133cef2af662d58b9702dc190fec29a08d2c2804c2a8701688ba836fbcc088", 0x3d}], 0x6, 0x1) preadv(r1, &(0x7f00000017c0), 0x218, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001880)='/dev/dlm_plock\x00', 0x101100, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f00000018c0)={'HL\x00'}, &(0x7f0000001900)=0x1e) 09:02:17 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0xffffffffffffffff) preadv(r1, &(0x7f00000017c0), 0x218, 0x0) 09:02:17 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80100, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f0000000300)={{0x1, @addr=0xb8c0}, "c2ff43ccb1fa5336d1b759b5639b6da586ac975138414a6f8993ff3ecb54ce3a", 0x1}) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RCLUNK(r4, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x121080, 0x154) r6 = fcntl$dupfd(r1, 0x0, r5) write$P9_RCLUNK(r6, 0x0, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r6, 0x10f, 0x85) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) 09:02:17 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x25, 0x0) 09:02:18 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) mmap$fb(&(0x7f0000ff8000/0x7000)=nil, 0x7000, 0x5, 0x40010, r3, 0xe6000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:02:18 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x33, 0x0) 09:02:18 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000001140)={@null=' \x00', 0xe, 'ip6gre0\x00'}) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) [ 1015.482968][T11272] qrtr: Invalid version 254 09:02:18 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x8, 0x4, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3023}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f0000000000)) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:18 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x34, 0x0) 09:02:18 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x26, 0x0) 09:02:18 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RCLUNK(r4, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r5, 0x40044591, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) write$P9_RCLUNK(r6, 0x0, 0x0) write$P9_RCLUNK(r0, 0x0, 0x2a) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r7, &(0x7f00000017c0), 0x218, 0x0) 09:02:18 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x470301) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) 09:02:18 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:18 executing program 1: r0 = socket$inet6(0xa, 0x800, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) chroot(&(0x7f0000000040)='./file0\x00') r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f0000000080), 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x2a8, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x128, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xc5, 0x3, "d466c64d0d4f09e187c71af0a3745a64a16b8dcfe331251a6cef20a3a5001ede660bf2d4cd34ae6621195a10e46e35cab3a0225a3eaf44fb5751d793e150a0cabc9efac8bfdfa2563ea30bc318537ec39ff350b3ba1613b6005a0705c7fda18638bc6fc089f44640c71d4e86ce05faaacd2e01c6ecabcccbd27b9791a03b734dc3a1f70727144c6df30489e2e8fbba89b91c8cee0da04663ad1a5d7d876fa8e4e13bd64d5ca0b0af2b1d8576f8c6f3ec14d4e716eee183b11b73d0d6886d434212"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xa, 0x3, "3438e740b679"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "cc80e0da420969cd986b5c8a3a970e589aa139f1c03eefc3b5ded3da2755"}}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x434e}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd25}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff639b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x91948e28}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x800}, 0x40000084) 09:02:18 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x27, 0x0) 09:02:18 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x35, 0x0) 09:02:18 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x10000, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RCLUNK(r4, 0x0, 0x0) r5 = accept(r4, 0x0, &(0x7f0000000080)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r8 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x24, r7, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}}, 0x0) dup(r2) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000001340)={0x88, r7, 0x400, 0xc, 0x25dfdbfc, {}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x1}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x6}, @NL80211_ATTR_SCAN_FREQUENCIES={0x2c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x9}, {0x8, 0x0, 0x38e}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0xed}, {0x8, 0x0, 0xa53c}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1000}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x800, 0x2}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x1}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x9000}, 0x20000000) fcntl$dupfd(r2, 0x0, r2) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000300)={0x0, 0xfb, 0x1015, 0x2, 0x0, "15ea514132065b327652883957a59891", "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"}, 0x1015, 0x0) write$capi20_data(r1, &(0x7f0000000100)={{0x10, 0x4, 0x86, 0x82, 0x5, 0x8}, 0x7d, "5199ab510b3585ee9b17a9009f2a70bf1f323ec5ba4135c35fb2cbea36a770434df7549584a62321ca3a189917f5710401e3bc3c8009029dc6be955301c500ff06d5591e6a5232863eea2e8c15c0c9a1043059906b6944b58f114c22b3fe925e53e86fdd0587816f14c31fffb25a5d68aa73a1d6c6c599746f5d32dfd7"}, 0x8f) [ 1016.139580][T11316] qrtr: Invalid version 254 09:02:18 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x36, 0x0) 09:02:18 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x28, 0x0) 09:02:18 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RCLUNK(r4, 0x0, 0x0) statx(r4, &(0x7f0000000080)='./file0\x00', 0x4000, 0x8, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f00000000c0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, r5}) [ 1016.243259][T11316] qrtr: Invalid version 254 09:02:18 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000840)={0x1138, r3, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1bb}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0x104c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "0eda24c352b4ba5c715972131bf6d70b9f1a16818daca099ac"}}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x1138}, 0x1, 0x0, 0x0, 0x80}, 0x20004810) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, r3, 0x7, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x530, r3, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x507}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3, @private0, 0x40}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}}}}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x61d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x78a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}]}]}, @TIPC_NLA_NODE={0x344, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "a9f2c1306cead6d13c738f3ae34a41505a6bb6e8"}}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "45312d5e4d878c924d8c0c29f75401c4b4d94c365fc9a26c96ea71"}}, @TIPC_NLA_NODE_ID={0x74, 0x3, "6df6019d013a7b7011fa3683d8866e35466745fecdd5be067719a0786ce30923bdee727aef360c7a989882104a5a929ebf4f25d197162265caf194199430818b8d2a7fa7cf982c2ddcd0d0b941cb484838c7fa0ff876c68c4fb5821634f880b653491091ba0d13f0bacfdaf14b30b8e6"}, @TIPC_NLA_NODE_ID={0xb1, 0x3, "d4b92f961425560f3098cad20f144c5aa25466397f757aaf3200f9ca118bd32d19b693eaa7971f145ddb2e661db4ee5bbd927f4f2182a42f945a7c2d55375252e5f3accf355025bb2d055feeae636cc4b5ec5cb12bb59b625d12c1818037934a1295bb73e785146af2cfb054742a7408bead1cc9fdf3069977ebff483a6256d57fc8ee426cddcaa67020c2a951942ad3b088d866fd7f5918caa3bf02765b094b7891a829e07ba207a861e40538"}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "d1062cbd26c68250b2ac77439046117547ef7ff365fa48b9bd"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "38810cadfb0a8e18095a44b3de05eede17710c67ade0c8a9621c4ceab1d062ad58"}}, @TIPC_NLA_NODE_ID={0xf9, 0x3, "849e1557a2b0576fa1b6529ddef64f6799fa8e7a40d53d1c5e5233916195e82985497fb5f92982e9b976b0279083dbee4ce3979ef2bb9e3e1e828b3f59117bee1c339a0c77029d98c26128346c8aad69dd1b6f5d2c1f118d2311e9b3ec714bc6139bb287bd7bacec5c0c5116ce032835d0344d396552f986070baf8000e313ae18d8837d3882be77d09efbe709839646bb5988b5ca114df9df9dc8e25a5af026cb95cb3d508c39d4ab691d39b762677a66530bdceaf2a33560a39791053314c4997ff9fc72ee5325cfd83e3fc5cf9d7009c949b433ccb131a7835fb38136a2d377c461ac0e9ca8dd19fa72fd7cbff54011f090c979"}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9992}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd6d6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x30000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x530}, 0x1, 0x0, 0x0, 0xc880}, 0x4000000) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) fcntl$dupfd(r4, 0x0, r4) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)="56ccf297c4e9f94aa235d96b518ecf6d3f27fbf84b5049de5d9489a6d1c47fe4", 0x20}, {&(0x7f0000001bc0)="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", 0x133}, {&(0x7f0000001a40)="54f03c7cd07a1e84b8343035ef1617ff2498b53edf709152b0034415b204ffd0d92203a6fae633861f5933ed933efe96b9d71a8d58248f089de40b93ea3f95e99eff3c249f03eb5b4745f206377278705c6b49e339cc7714bdc64f83c0f2b73870a4bf978274", 0x66}, {&(0x7f0000001b40)="51099f69a4a49f08ba0efd848d87b1120848dc7e4ea72ab6811231bcaa2b4979bd5d8b7062e37af6d5d13681584b52ce28f4eb4c436bf53dcd6319dd24c730af0055df7d869701290f5d31d29c5f12254008d5033db33a42daa321eb6077c806b0d0a94914fa39f2132bc9b2b774e586f67f4793c811f8828aff55", 0x7b}], 0x4) 09:02:19 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x29, 0x0) 09:02:19 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x37, 0x0) 09:02:19 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r3, 0x0, 0x0) connect$tipc(r3, &(0x7f0000001200)=@name={0x1e, 0x2, 0x0, {{0x40}, 0x1}}, 0x10) r4 = fcntl$dupfd(r1, 0x0, r1) socket$nl_generic(0x10, 0x3, 0x10) write$P9_RCLUNK(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000140)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, r6, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000001240)={{0x4, 0x0, 0x0, 0x9a000000, 'syz0\x00', 0xc3}, 0x1, [0x1, 0xc48, 0x401, 0x3, 0x4, 0x0, 0x2, 0x9, 0x9, 0x0, 0xfffffffffffffffc, 0x4, 0x0, 0x5, 0x100000, 0x1, 0x7, 0x6, 0x17, 0x8001, 0x0, 0x2, 0x4, 0x1, 0x101, 0x1, 0x10001, 0x5, 0x6, 0x8001, 0x7, 0x40, 0x57, 0x8, 0x4d5e1dc7, 0x6, 0xffff, 0x0, 0x3, 0x505, 0x80000000, 0xffffffff, 0xfffffffffffffff7, 0x4, 0x7ff, 0x80000001, 0x80, 0xfa, 0xffff, 0x7c4248c3, 0x1, 0x1, 0x3, 0x4, 0x5, 0x0, 0x0, 0x1, 0x2, 0x6, 0x621, 0x7, 0x3, 0x4, 0x80000001, 0x6, 0x8, 0xffff, 0x20, 0x1, 0x1, 0x6, 0x8001, 0x0, 0x9, 0x2, 0x7fffffff, 0xbe00, 0x80000001, 0x8, 0x1ff, 0x7, 0x8, 0x8, 0xe0, 0x0, 0x7240, 0x4, 0x3, 0x0, 0x3, 0x400, 0x18, 0xe74, 0x3ff, 0x7, 0x2, 0x100, 0x80000000, 0xfff, 0x200, 0xfffffffffffffffa, 0x7fff, 0x10001, 0x7, 0x0, 0x5, 0x81, 0x2, 0x2, 0x4, 0x1, 0x100000001, 0x1ff, 0xffff, 0x1, 0x6, 0xffffffffffffdedc, 0x7, 0x5, 0x8c, 0x8000, 0x0, 0xba0, 0x6, 0x9, 0xc4, 0x1f]}) sendmsg$SMC_PNETID_DEL(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000001740)=ANY=[@ANYBLOB="88000000", @ANYRES16=r6, @ANYBLOB="020629bd7000fedb713827df25030000000900010073797a3100000000050004000a000000140002006970365f7674693000000000000000000900030073797a320000000014000200766c616e3000000000000000000000000900010073797a32000000000900010073797a3100000000140002006272696467653000000000000000000080e1033ab55cfa4660b92642073ecbf46a8242cc8c8cca68896f8bd5d37e0f2399090eed198b79b24e85f5968ba940fa8a73a566532ab8934691fe332f794036c1c7d4751ed84405e602095fb82c1e017f02c4411207ffef18d79f7c5407b910f5d0e2f7706db57b39f02958f927c7c04f71917adfdd7bfd257f0b253950771d75ce5373847998cf32e42d5c8e7141762b0565"], 0x88}, 0x1, 0x0, 0x0, 0x22040841}, 0x20000000) 09:02:19 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000001140)=""/136, 0x88, 0x6, &(0x7f0000001200)={0x77359400}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x5}}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RCLUNK(r4, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) r6 = fcntl$dupfd(r5, 0x0, r5) write$P9_RCLUNK(r6, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40802000}, 0xc, &(0x7f00000013c0)={&(0x7f00000012c0)={0xfc, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8040}, 0x20000002) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r6, &(0x7f0000001240)={0x2}) ftruncate(0xffffffffffffffff, 0x5) preadv(r2, &(0x7f00000017c0), 0x218, 0x0) 09:02:19 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x38, 0x0) 09:02:19 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x2a, 0x0) 09:02:19 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r3 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000800000000203000016000300", @ANYRES32=r4, @ANYBLOB='\b\x00&\x00\x00\x00\x00\x00'], 0x24}}, 0x0) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x40) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001400210100000000000000000a000000", @ANYRES32=r9, @ANYBLOB="14000100ff02ad20e980000000000080000000010800080019060000cb1b73c510054e26513ebb9602e707f8e90fbf89c2ca363abdae54b5"], 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x2c}}, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) 09:02:19 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40000, 0x0) fdatasync(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x200281, 0x0) sendmsg$alg(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001140)="ef354f15ff68289869a1d8784f48363a896b212c9178f20763106279af9201628bf16dde889ad86b77d7608f16926727acedcb4cfafa041839816d1132bc4b90739136052189711aa036c076c72ec660a3e2c3c0aac7e5050f536610652988296699a7", 0x63}, {&(0x7f00000011c0)="b096dbf091e0fa6df20e555ee84532d038c3fc4c0402d4e9ebfc229746490edf133d687120b6e7f7571dde564150142a7b822bb5252c2d1feef685dcf6b4d63b36763bf3d2fca6a8d3346a64abf8edb5cf20a3809970e2e97dabd73a7d71f22a85ed5417cdd3ff6b24f37d909f388a35df3e9e92d945fa6750a9cfb11a0bf2073f80b0e312a786fa7ddd85f9fbec149aaa4ce410d6cb9ed5c4cdc626561dfef749c8008bedb4464a72f490a0f8c6d1f84288437aa9390591d383eaa1a02cdd42504ef080fa695b9464091ba13c760380da38f9dc08b130718d3c778378fef430e0f656ee76ff627fafda049ae33e27", 0xef}, {&(0x7f00000012c0)="f8cff8f6bce2977a11cb28dd964e7d121a678377b663d38b0fe7d2a02d1f05cca3a641", 0x23}, {&(0x7f0000001300)="6c4f4f8f89527b084f", 0x9}, {&(0x7f0000001340)="fd6c66526821538396a90793e23c9737a52e9045b07621d2d4ba8b43d68973d34b790919ba3ca30e2a7b3f67989b", 0x2e}], 0x5, &(0x7f0000001400)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x4}, @iv={0x98, 0x117, 0x2, 0x84, "97bacf296f172c16b0845ca47b0d807cab172f1db7bfc10a3ba5e4e3562c1b55621e20509704b171ee81c301d9898fb954a3ce6006d2ebedcb88b9f1b783317624b8ece1bfaf87894e43772c44b0e2dad52c2bbe41e502262b25afb8f8b39862747abc1fd0f6ef97a8ba0dd0e55e1e38e8fafcd103f8795debe25c1a23eff1e7b1f867d6"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x48, 0x117, 0x2, 0x33, "1024795db55d6dff9e0ee29e1053b0e2a74fe6a9c5d148483ef21c21e633f7b9568956e1227ce1330ab8c65f7c7dc55b3b058a"}, @op={0x18, 0x117, 0x3, 0x1}], 0x140, 0x4000000}, 0x81) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r3, 0x0, 0x0) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000080)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0) 09:02:19 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) write$binfmt_elf32(r0, &(0x7f0000001240)={{0x7f, 0x45, 0x4c, 0x46, 0x75, 0x3, 0xf9, 0xb4, 0x3, 0x3, 0x6, 0x80000001, 0x3e8, 0x38, 0x25f, 0x3e7, 0xf000, 0x20, 0x2, 0x8, 0x4, 0x4}, [{0x70000000, 0x80, 0x401, 0x7, 0x5, 0x7ff, 0xb8d, 0x3}, {0x6474e551, 0x10001, 0xffff, 0x7, 0xfffffff8, 0x4, 0x7, 0x2}], "1261e18b3a0ff8ca7359a8c95d6cbc1658004f0ee9bec1ea83bd868eb0762c472c1d03bfe55c9b96523acbbbc0f5268dafca482149f64140f98b031f3a7fd0cdfbeb5d37fd8a23d8e9bebab82647650d47e86f9c595eee8a7d9611c11a7758dee6127f494f1275080e5788fcfc6029801e5de279eedb3482cc55f9bb1fb32c29354695c28cce3b5e6a5febd66fc94fc31a10f3f068b631a9715ed72fd93391c471ffee851049835272209a1233a74762bf5834f00ff11bd955a782b5a89b6ad5a115fc07b2034d9026f253767e5ab4e8751be6a23158ae387907d6e290", [[]]}, 0x255) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000001200)={&(0x7f0000000080), 0xc, &(0x7f00000011c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x68}}, 0x20004800) preadv(r1, &(0x7f00000017c0), 0x218, 0x0) 09:02:19 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0xffffffffffffffff}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r5, 0x7f}}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) [ 1017.260665][T11362] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 09:02:19 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x100010, r0, 0xffffffffffffff84) ioctl$KVM_NMI(r2, 0xae9a) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') pread64(r3, &(0x7f0000001140)=""/245, 0xf5, 0x1) preadv(r3, &(0x7f00000017c0), 0x218, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) 09:02:19 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x2b, 0x0) 09:02:19 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x39, 0x0) 09:02:19 executing program 5: writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) 09:02:20 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) getsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f0000000000), &(0x7f0000000080)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0) 09:02:20 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x2c, 0x0) 09:02:20 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x12, 0x8, 0x7}, 0x18) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="fe", 0x1}], 0x1) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)={0x8, 0xc, 0x4, 0x0, 0x9, {0x77359400}, {0x2, 0x0, 0xe0, 0x0, 0x7, 0x41, "8db04e82"}, 0x3, 0x2, @userptr, 0x6}) 09:02:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0)="4620fc3831f58c032811d5d4bbd5281861e0ace43c9aae914e9f10c2266664a997842718267dd10689a0e0bf1693f11d942e74a7c88cdf45f148b5a3ba44ff973e787f7fcb821030bdd4d9dd3e0f9a01307b23c12cc3f47f4081092e722c51e006e813c2d4e376e65d01e71b94029e66ae7fdd8a5cb24a49de1be2e9f6d304304b9b35180bb468d332542f7afba033c3e8972bf7257f0052b9acceb02e17830d3aaba7f55767269f9de30bde0d93a2f424f91b2e85be5fe66f17bd7e8f32c34b67ef4911e53c25c7c6b6d88c63eafdcff026c6b25f24dd259ede4ac925", 0xdd, 0x0, &(0x7f0000000080)={0xa, 0x4e27, 0x3, @loopback, 0xffffffff}, 0x1c) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xffffffffffffffff, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x16c, r4, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xa4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7d}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3e490fbf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}]}, @TIPC_NLA_SOCK={0xa8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3c0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x609}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9ab4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2605}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x10000}, 0x10) shutdown(r1, 0x2) r5 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r5, 0x1) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x444840, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x35a5bf0d, 0x6, 0x0, 0x22735f8a6f420be7, 0x4, 0x0, 0x3000, 0x2, 0x0, 0xfa34, 0x3f, 0x56a, 0x0, 0x3, 0x17, 0x20, {0x3, 0x8}, 0x0, 0x50}}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:02:20 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x3a, 0x0) 09:02:20 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x4, 0x100) move_mount(r1, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000001140)='./file0\x00', 0x33) 09:02:20 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xffffffff, 0x7fffffff, 0x200, 0x78d9, 0x7}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r1, &(0x7f00000017c0), 0x218, 0x0) 09:02:20 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x2d, 0x0) 09:02:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x500, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:02:20 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, r3, 0x536ae464467e3e0b, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x50, r3, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) writev(r4, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) 09:02:20 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x3b, 0x0) 09:02:20 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x2e, 0x0) 09:02:20 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r3, 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r3, 0x1, 0x53, &(0x7f00000000c0)={0x7, 0x7, 0x2}, &(0x7f0000000080)=0x28) [ 1018.173716][T11418] qrtr: Invalid version 254 09:02:20 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x2f, 0x0) [ 1018.250824][T11418] qrtr: Invalid version 254 09:02:20 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x3c, 0x0) 09:02:20 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) 09:02:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, [], 0x1}}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$P9_RCLUNK(r5, 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000000300)={'nat\x00', 0x0, 0x3, 0xd3, [], 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000200)=""/211}, &(0x7f0000000080)=0x78) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:02:21 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000001200)={{0x3, 0x0, @descriptor="5ba9322cc2869bba"}}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RCLUNK(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r6, 0x423, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f00000011c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001140)={0x50, r6, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x28}}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4880}, 0x80) 09:02:21 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x30, 0x0) 09:02:21 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x3d, 0x0) 09:02:21 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) r1 = gettid() ptrace$setopts(0x4206, r1, 0x8, 0x4) tkill(r1, 0x40) alarm(0x2) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x20e00) ioctl$SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, &(0x7f0000000040)) ptrace$setopts(0x4200, r1, 0x9, 0x38) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$P9_RCLUNK(r3, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x17, &(0x7f0000000000)={r6}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000100)={r6, @in={{0x2, 0x4e24, @loopback}}, 0x401, 0x3, 0x6, 0x7, 0x1b, 0x80}, 0x9c) 09:02:21 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000011c0)={0x0, 0x0, 0x4, 0x0, [], [{0x2, 0x20, 0x1, 0xfff, 0x5, 0x1}, {0x0, 0x8a98, 0x2, 0x4, 0x3, 0xfffffffffffffe00}], [[], [], [], []]}) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, r4, 0x536ae464467e3e0b, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000001180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001140)={&(0x7f0000000080)={0x64, r4, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1be2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040010}, 0x10) 09:02:21 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x31, 0x0) 09:02:21 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x3e, 0x0) 09:02:21 executing program 5: getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r0, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r0], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r0}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x619}]}, 0x34}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x619}]}, 0x34}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f00000005c0)=0xe8) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r9, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r9], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x619}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xc4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xc4}}, 0x20040000) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) 09:02:21 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x32, 0x0) 09:02:21 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x41, 0x0) 09:02:21 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x17, &(0x7f0000000000)={r5}, 0xc) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000001240)={r5, 0x44, 0x3, 0x5}, &(0x7f0000001280)=0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r6, &(0x7f00000017c0), 0x218, 0x0) syz_mount_image$erofs(&(0x7f0000000080)='erofs\x00', &(0x7f00000000c0)='./file0\x00', 0x5, 0x1, &(0x7f00000011c0)=[{&(0x7f0000001140)="31ca94dea5d10a91dbeaa4132b464b230613a2575f995ccea0ce79953167770e30e4940b9db9f1869ee2e221479c264b34c2315bb8b81c76789cddcee644ab49fbd0d49c67935b0ccd5507a661ede7d5fbb0cbb79e83f093c603388669f482ee74c83c71304c208cac096e42f264e7f949d77c7b", 0x74}], 0x280008, &(0x7f0000001200)=ANY=[@ANYBLOB="7573ff7f00000000000061636c290891726a5f757365723d2c00"]) 09:02:22 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x301) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x101200, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x18d002) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40001, 0x0) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000100)={0x51, 0x7, 0x3062, {0xff2a, 0x7}, {0x5, 0x1f}, @rumble={0x8, 0x800}}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040)=[@mss={0x2, 0xe31}, @sack_perm, @window={0x3, 0x1ff, 0x3ff}, @sack_perm, @sack_perm, @mss={0x2, 0x6}], 0x6) 09:02:22 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x33, 0x0) 09:02:22 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000001340)='/dev/zero\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x15, r0, 0x0, 0x0) keyctl$revoke(0x3, r0) r1 = add_key$fscrypt_provisioning(&(0x7f0000000000)='fscrypt-provisioning\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000001140)={0x0, 0x0, "fef6e2400e24ba82d4545be84c4acd3b41433c6ffed9f66e69d6e8193b3c2142ebce9dd2cf5dd6f409ae3516235cefe50532facc2a58d1ef570611fbddebbb11bb7a7c0c86cf8554643e379ea0fb884cc0c68f7aa9ab218da891123cad62084fee0dd2cfd0c57f5ef228a4240730c27188379e8f70c04edaf3470df0e6394b54c6c52ef190860dae9100b734846c76f35d54de41c1170ccfa708a4c25633b99bf5991517504b1aed266b"}, 0xb2, r0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$P9_RCLUNK(r3, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000001840)=[{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001380)="48c8be0b70ffbaaf0ee866cb57eb680863b621b74babda96a80c177e42f420f0d86822d599624490ff0bea5ce898f98def6b6190f184821907f3a6ae89b7bb559848d5124bb055e476942df67eaf1ce39c39f8", 0x53}, {&(0x7f0000001400)="0b187d274a8a8a73e70961aa5ea69bfb61c22bac8df340b9915384663829ddc8b8d37a3dd8234c0a3faae30aebb47c4439bebbe9c3b480a2bd3ae256826318e6c16795cbb625300044a87f17e40b4dee609003f4400428da", 0x58}, {&(0x7f0000001480)="543997cc039f541a5c2249539549a824f3cf96d175b8c1f3271d4bcda79ae551ef05cecade6c1462e460af66cd9ac9fe4481412631e83f37abc5de6a2632385eac0cc3f6a6d059530a04849cc217065a74bc", 0x52}, {&(0x7f0000001500)="b97a5bd325f7d313a667993343e93134164c96f53e15b4ac792cda3bf75574d70de27caa73b3e7db9052229fe66a20a228a4b03f131507fe6e41c5765044f3aea1ca2b868026c58d931235a0aa0a9ebb77317142d226d97765a6fd2209582abcea2e749677c29659c77b84a22ee3011e06b02178c3313fc4f61f76d0d66b9b811a096bcd70c5f411d12b39c1af23a05481d2ac3d29d867a8fe924b5f7c125729513c5d49504ae41a3d6c51efe40f7ff94a08c29547a0978e16bc53e0e3f9dd50505b0c15f6fc21afe690a4b59895c94318e0e1c4691cce5e38b407ac0a0e8c1c48e123a163f9924ea04aecf8583116c4a189eec694fb", 0xf6}, {&(0x7f0000001600)="a51883134b71c7f245926d8c99878f3a625af5bcb083dadc3e0fe6b0ba6b21568fd6afc8b1ee8da740e5d378fab493250b76a7b92177a88c510a96a4861ac5562a9b15c79453472b56c8c9ab168faccb58e2a23cfcd8788513f2746c9213dee1dcdaf3ab1a0a586b861ad70d2a124280c95d1fd955040452923b8b15bab6b64a9fe4a678c74646", 0x87}], 0x5, &(0x7f0000002400)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0x78, 0x117, 0x2, 0x62, "f7aa21dff882b103a79cea6f68ce84ae252ff2f0514140808678fcbb72927fe7edbd66ac03ffc131ec57e0a0ee43fd9584aa98047bf3a7479c3d7eea1cdd1d3ff76b29185d8470d73e69593c02679d35b09cce16eded8e46463541a63fa78f45a293"}, @assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x1108, 0x4000000}, {0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001740)="8f69301b4bd21bca04a613d58ac0373db2f7b77be3db8f086484a2edc42710bac4fe096686913a9989d8421e7c2a8df1c8bc1631d1271092a7c4cf81338fb6fe8d43bc3266926a5a92d85459f6587bfce84a3d9e00781261c69f58a974141ba070375c480a1a454224805823d533127f2287899467d14a45ce3d4519216ae30685c4dbe14ec1420fc69c4f7513f8615b591035e798f90e6a27475bd4224b0ccc1f2aa88a4c641bf77b53c263a960d90ce7a725010665", 0xb6}, {&(0x7f0000003540)="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", 0x1000}], 0x2, &(0x7f0000004540)=[@iv={0xb0, 0x117, 0x2, 0x96, "75a60ea3f31661d361c21b52c74c8447c5b424ad0583b16bd3968314603d6b056405e74afd84ecd54c122572e09ff9c8bcc1e34de3591d45d62595f889de2238ea564337e12d4a77491bd79c7508f2f1ed32eeae50f0caacaf715bc058593f29ea72e141956274961e62d2851ca4a89bcd9884faadeeeb6d4d1edad227b6068ca003ea0e07025b5369047f6b5ef932a692dbc4ee1796"}, @iv={0xc8, 0x117, 0x2, 0xaf, "19f378be666e34548107313bf25b868ee241a8afebe795f65dbba3fc0f93ef1b1abb6494e87aa47e73ab575962efbdfd5558dc484fc2c9b66b0d7debaee2ef482c9897d89d08e5d9062188efcd3836e3dee292fafc071a7eac8e8ed3e5ef2e1a5b301963710e6e309ebc48a6b28e2785a97326aedbbc866b634931440e8a284c7ab975962a90cfd88243e69d1c00a5f232ee84ca319d3236df135a6e09f7494e866817abafb1bedc3a6cc21f834d4b"}, @op={0x18}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0xb8, 0x117, 0x2, 0x9e, "b9d06151eaf2da4b67f1cb942b3d1d42f2a4a77a34b632ae62cf148664b4fb4486a472d30acfa31df9d390c108b894349d3938731b8a0593ac08aed2a6c160e464177dcad6565c9ec8f018f23dda5aedab723bb2ce54a125c04cee93d2451964c1200fd5c61f4d8b4fa1e791c294b1a75cff577d9d504a46b007bae8cd176e866a47b8123b4c11afd25cdf5c93d3377532cbd5975f1f5968dfdcd333ffd6"}, @iv={0x48, 0x117, 0x2, 0x33, "0c3a1ee6cc9099a389bebe901457409d5d3909578965b9bedc29803923118d51c2e2c02405848997e050b4537d480428f46a56"}, @iv={0x80, 0x117, 0x2, 0x68, "7db87632378a291f805e4539ceeef1a9c666b20061356e2c5f2330b5873d9ad668786610c3f63b72192d4a827a934e05a8d9443de6d59fae533215851c7f396c89509c81a915aee4bd73dd9e2904155014bed297820e7670139e85da693e8ddcdd83afe77c7618d8"}, @op={0x18, 0x117, 0x3, 0x1}], 0x1340}], 0x2, 0x4) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r4 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r4, 0x0, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r1, 0x1e, 0x47}, &(0x7f0000001200)={'enc=', 'pkcs1', ' hash=', {'rmd320\x00'}}, &(0x7f0000001280)="0d0aa3a469538b5cb785d68f3f1eb3798c1316bfd19be4a1c7c09b8b89e7", &(0x7f00000012c0)="fb2cec655af819e8052b9e48387bce847d2f6d4ad2aa056b0fd68bc2221a7469cd275c84ef73020d3f4ef3ce5066e5541fa4a29373f235e9d581625939987dde3218c254ef5fcd") r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r5, &(0x7f00000017c0), 0x218, 0x0) 09:02:22 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x42, 0x0) 09:02:22 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, [], 0x1}}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000280)={'syz0', "19b816f84910be64ee2c1e9a58f3a7162a"}, 0x15) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) prctl$PR_SET_ENDIAN(0x14, 0x1) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$P9_RCLUNK(r5, 0x0, 0x0) getsockname$unix(r5, &(0x7f0000000200)=@abs, &(0x7f0000000080)=0x6e) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x31, 0xf, 0x3, 0x1, 0x1, 0xeb, 0x20, 0x6, 0x81, 0xec, 0x4, 0x0, 0x2, 0x7f}, 0xe) [ 1019.518759][T11495] qrtr: Invalid version 254 [ 1019.584812][T11495] qrtr: Invalid version 254 09:02:22 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x43, 0x0) 09:02:22 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x34, 0x0) 09:02:22 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x181) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) [ 1019.774776][T11514] qrtr: Invalid version 254 09:02:22 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x16) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0) 09:02:22 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x35, 0x0) 09:02:22 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x44, 0x0) 09:02:22 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:22 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0xa20000, 0x4, 0xff, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa2093d, 0x5, [], @p_u32=&(0x7f0000000000)=0x2a16d7f2}}) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r1, 0x40044103, &(0x7f0000000100)=0x4) 09:02:22 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x36, 0x0) 09:02:22 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x45, 0x0) 09:02:22 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) fcntl$dupfd(r0, 0x0, r0) fsetxattr$security_ima(r0, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000080)=@ng={0x4, 0x6, "7f2282e0a012c7ff5acca1a7b2"}, 0xf, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r1, &(0x7f00000017c0), 0x218, 0x0) [ 1020.288046][T11542] qrtr: Invalid version 254 [ 1020.325968][T11542] qrtr: Invalid version 254 09:02:23 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) fsync(r2) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:02:23 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002200), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RCLUNK(r4, 0x0, 0x0) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x996d) fanotify_init(0x20, 0x400) 09:02:23 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x37, 0x0) 09:02:23 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$P9_RCLUNK(r4, 0x0, 0x0) write$P9_RSTATFS(r4, &(0x7f0000000380)={0x43, 0x9, 0x2, {0x1, 0x80000001, 0x2, 0x8, 0x9, 0xc995, 0x0, 0x5, 0x6}}, 0x43) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x619}]}, 0x34}}, 0x0) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000080)={r6, 0x1, 0x6}, 0x10) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) writev(r7, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) r8 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) getsockopt$IP_VS_SO_GET_DAEMON(r8, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) 09:02:23 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x46, 0x0) 09:02:23 executing program 3: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x79) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto(r0, &(0x7f0000000600)="0400", 0xfee9, 0x8002, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000e40)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0) [ 1020.629184][T11564] qrtr: Invalid version 254 09:02:23 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x38, 0x0) 09:02:23 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) fcntl$dupfd(r2, 0x0, r2) preadv(r2, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r5, 0x40044591, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) write$P9_RCLUNK(r6, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000001140)=[@text16={0x10, &(0x7f0000000080)="660f388179c766b9c70800000f32f08018002e0f21dfbaf80c66b8c00e788e66efbafc0cb8b259efdbf00f20e06635040000000f22e066b95809000066b8b7de000066ba000000000f30260fc643da9a0fc729", 0x53}], 0x1, 0x20, &(0x7f0000001180)=[@efer={0x2, 0x1800}, @cr0], 0x2) preadv(r3, &(0x7f00000017c0), 0x218, 0x0) r7 = creat(&(0x7f00000011c0)='./file0\x00', 0x24) read$hiddev(r7, &(0x7f0000001200)=""/17, 0x11) [ 1020.767919][T11564] qrtr: Invalid version 254 09:02:23 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x47, 0x0) 09:02:23 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="fe55b584a18bb57966abc541a7081f7d30b569bd2db0d2e33fe76eff6b5fb93fea6d83fc044cbd4e0d869be33259998d5b47fce8086208b2cd17abc2fc3ee4515011c8e06181866493201990683556c4a4590e706aa73c03f6a03479c353a87eadae4185173a45fa0b746eea404ac8656f5e14a6ac63e2af59659e98f05cd5171121b92c15e96dbaf00e89e2b8b964254ba97d2bb1626c297f6ac9f9148bc1d030a0e70f8d7e4e8f9a9fedffc6d5d256297bbd9ec620394f3de0f29407b2a69f436418e86657506cc15bfd3045abe5e43f3c1bf8adc78df8a76dd9fb3d369bcb01fef9a1d2b23c6373fda8741cb73262672c73", 0xf3}, {&(0x7f0000000040)="52035f9d08801cd940cc9c9980d4b92be0f3cf177ca5b7778c5daadad3a3b336c66e749bac68e36ddd8e7656b63c27f3b746f74cfa13ada3bd070218585dca8b4049a0fe583d0de6fb378198e7030a640aa463acdafce2385bddb1428bb3cb1a04c423e6f596f6a0702e2b2ee6c07817ece5e7a98b3a3c82d65ef29b", 0x7c}], 0x2) 09:02:23 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x1}, 0x1) preadv(r1, &(0x7f00000017c0), 0x218, 0x0) 09:02:23 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x39, 0x0) 09:02:23 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RCLUNK(r4, 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x121281) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r5, &(0x7f0000000040)="bbb62a6f2c6360e420fb3b53", &(0x7f0000000180)=@udp6=r6, 0x4}, 0x20) shutdown(r2, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:02:23 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x48, 0x0) 09:02:23 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x24) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000080)={0x3, 0x200, 0xf, 0x3, 0x9, 0x5}) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r3, 0x0, 0x0) read$usbmon(r3, &(0x7f0000000300)=""/4096, 0x1000) 09:02:23 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f0000001300)=[{&(0x7f0000001140)="3668587b1003b3b9bacb86c02b85c71e35992aa1bff0b35bfbc4ea958fbfa30a31d03b5c25adf07f4d8467b4ecdfb2357fd43261f6671ad80d52b718788ef2e3e279e18ae12ddd5ea37d4c0600785c2d5f6515c228c948dd977bbf57b685f2a44d1a67c1db4b5993d49af1b17ab3628092aafb0752ae1e6f70c5f0859c228a00836e3ea017f7f4ff4f49ac8a050e4fa505f50e26186e5b512ca9dce76442b67a", 0xa0}, {&(0x7f0000001200)="6d70d18e48ee9d89994ee0bdb596abd1f41b50fb5746f5572721af23ada9ec9e40f471aef3147d5e82929e992202fe49dfaaf8d7ccd4fd7bb25aa2c2cb5110922e96eb1f94bb108d020d96c2039456ca0bc562e90592bece17bd2425671e4b0f77041effc90cf854220523b39b0bb84ce76cde3128bca4a39719ca30167a6aeb29b72c60a0ff1278c092837704954feb8427d12e374a583b59", 0x99}, {&(0x7f0000000080)="c6859dbba8bfb2f63d81d55d0fdb5df1a2097d835e3e3aafadbfd4ca782b74395e3847c636f9684f1598a4dbcc7fddc84b995ddafa9dbe3cad30778cdd26b6cb1bad55849da4d86dbd49", 0x4a}, {&(0x7f00000012c0)="0efdfbfdf8329f2cd3b70567784512e302291e82f6789069baadfcd84100112df4da0df6685ae6a229e47206f6cd8cd38af5d68f02", 0x35}], 0x4, 0x100000001) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r1, &(0x7f0000001540)=[{&(0x7f0000001340)=""/184, 0x42}, {&(0x7f0000001500)=""/46, 0x2e}, {&(0x7f0000001440)=""/190, 0xbe}], 0x3, 0x0) 09:02:23 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x3a, 0x0) [ 1021.254855][T11606] qrtr: Invalid version 254 09:02:23 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x49, 0x0) [ 1021.342082][T11606] qrtr: Invalid version 254 09:02:24 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001140)=""/4113, 0x1011}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:24 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x50f000, 0x0) dup3(r1, r0, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0x9) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)="659dc555cdcba84181c86896e3258455c35614a29a0f", 0x16}], 0x1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r3, 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0xfb926994fe63d426, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$P9_RCLUNK(r5, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r6, 0x40044591, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) write$P9_RCLUNK(r7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000180), &(0x7f0000000080)=0x18) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000100)={0x40, 0xfde, 0x1ff, 0x3, 0x1, 0x3}) 09:02:24 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x3b, 0x0) 09:02:24 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x374) setreuid(0x0, r2) ioprio_set$uid(0x42b1d4c3dadd2b9e, r2, 0x4) r3 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r3, 0x0, 0x0) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x17, &(0x7f0000000000)={r6}, 0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000001240)={0x1, 0x6, 0x6, 0x7, 0x7, 0x3f, 0x7ff, 0x4, r6}, 0x20) ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, &(0x7f00000000c0)=0xaecd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r7, &(0x7f0000000080)=[{&(0x7f0000001140)=""/197, 0xc5}, {&(0x7f0000000000)=""/11, 0xb}], 0x2, 0x3b) 09:02:24 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x4a, 0x0) 09:02:24 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x3c, 0x0) 09:02:24 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x17, &(0x7f0000000000)={r6}, 0xc) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={r6, 0x3}, &(0x7f0000000080)=0x8) 09:02:24 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r1, &(0x7f00000017c0), 0x218, 0x0) 09:02:24 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x20, 0x7, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040821}, 0x1) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000000)='smaps_rollup\x00') preadv(r3, &(0x7f0000001140)=[{&(0x7f0000000040)=""/177, 0xb1}], 0x1, 0x0) 09:02:24 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) fcntl$setstatus(r0, 0x4, 0x40000) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x201080, 0x0) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000200)={0x84, "1d51f07d06c0de53d936946d1039c1de965e5deb4e505c60a8d0e0cc1496302d", 0x1, 0x4, 0x3, 0x4000, 0x20001, 0x2}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x1, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x1) recvfrom$rxrpc(r2, &(0x7f0000000040)=""/14, 0xe, 0x40000022, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x5, @loopback, 0x6}}, 0x24) 09:02:24 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x4b, 0x0) 09:02:24 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x3d, 0x0) [ 1022.041080][T11652] qrtr: Invalid version 254 09:02:24 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x17, &(0x7f0000000000)={r3}, 0xc) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={r3, 0x2, 0x9, [0x7, 0x5a6f, 0x200, 0x6, 0x7, 0x81, 0x6, 0xfffe, 0x9]}, &(0x7f00000000c0)=0x1a) [ 1022.149046][T11652] qrtr: Invalid version 254 09:02:24 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x241002) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$P9_RCLUNK(r5, 0x0, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$P9_RCLUNK(r6, 0x0, 0x0) write$uinput_user_dev(r6, &(0x7f0000000200)={'syz1\x00', {0x8, 0x2, 0xffe1, 0x4}, 0x1c, [0x8000, 0x8, 0xb7, 0xfffffffe, 0xfff, 0x1, 0x5, 0x3, 0x8, 0x30, 0x5, 0x75fda793, 0x2, 0x6, 0x7fff, 0x6, 0x3, 0x7, 0x9, 0x40, 0x8000, 0xfff, 0x3, 0xe7c, 0xfffffffc, 0x4e, 0xff, 0x80000001, 0xdeda339, 0x10001, 0x1, 0x81, 0x4, 0x6, 0x7fff, 0xffff, 0x2, 0xf4, 0x80000001, 0x9, 0x8, 0x3, 0x1, 0x7f, 0x0, 0x2, 0x9, 0x3, 0xffffffc0, 0x7, 0x7, 0x0, 0x401, 0x1, 0x0, 0x2, 0x9e00, 0x0, 0xf0, 0x5, 0x5, 0x0, 0x12, 0x9], [0x6, 0x1, 0x5, 0xc53, 0x4, 0x4, 0x0, 0x10000, 0x6, 0x2, 0x8000, 0x66, 0x1000, 0x8, 0x3, 0x8, 0x1, 0x3, 0x3, 0xfffffff9, 0x4, 0x6, 0x8, 0xfffffffb, 0x9, 0x4, 0xb9, 0xff, 0x8001, 0x22c7a6a5, 0xce24, 0x8, 0x7fffffff, 0xe7b, 0x0, 0x6, 0x151, 0x0, 0x2, 0x3, 0x180, 0x9, 0x9, 0x0, 0x7fff, 0x1, 0x3, 0x1000, 0xffff, 0x3f, 0x20, 0xff, 0x80, 0x3, 0x7, 0xfff, 0x4, 0x2, 0x3, 0x8, 0x7fff, 0x5, 0x38fdf939, 0x81], [0x3f, 0x1ff, 0x6, 0x4, 0x1, 0x7, 0x2d0, 0x0, 0x8, 0xf30, 0x10001, 0x3, 0x6, 0x7fff, 0x7fffffff, 0x200, 0x7fff, 0x37, 0x731, 0x4, 0x3f, 0xfc, 0x1, 0x1, 0x9, 0x0, 0x20000, 0x5, 0x2, 0x4, 0x3, 0xfff, 0x50, 0x48, 0x20, 0x10000, 0x4, 0x20, 0x400, 0x3, 0x3, 0x815f, 0x7, 0x1, 0x6b, 0x0, 0x37f6, 0x8, 0x6, 0x101, 0x3, 0x2, 0x1000, 0x0, 0x7f, 0x80, 0x3, 0x3, 0x8000, 0x800, 0x800, 0x440, 0x7f, 0x40], [0x1ff, 0x4, 0x8, 0xfffffffd, 0x0, 0x9, 0x2, 0x2, 0x400, 0x3fc00000, 0x0, 0x2b, 0x8001, 0x3ff, 0x5, 0x63, 0x1, 0x40, 0xffff, 0x259f, 0x7fffffff, 0xfffffffa, 0x2, 0x80000001, 0xa0000, 0x1, 0x5, 0x7fff, 0x101, 0x6, 0x6, 0x5, 0x9, 0xfff, 0xffff, 0x2, 0x4, 0xffff, 0x0, 0x7fffffff, 0x20, 0x9, 0xe4800, 0x399a, 0x800, 0x80000001, 0x20000000, 0x2, 0x2, 0xfffffffc, 0x6, 0x5, 0x4, 0x5c2, 0x3, 0x3f, 0x297, 0x5, 0x8, 0x5, 0x9, 0x8000, 0x0, 0x81]}, 0x45c) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) 09:02:24 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x4c, 0x0) 09:02:24 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x3e, 0x0) 09:02:24 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x90, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xced}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffff7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xf8}]}, 0x90}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) 09:02:24 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000001140)=""/196, 0xc4}, {&(0x7f0000001240)=""/244, 0xf4}], 0x2, 0x81) [ 1022.419296][T11675] qrtr: Invalid version 254 09:02:25 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) clock_nanosleep(0x1, 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:25 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x4d, 0x0) [ 1022.532701][T11675] qrtr: Invalid version 254 09:02:25 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x41, 0x0) 09:02:25 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x28a640, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r1, &(0x7f00000017c0), 0x218, 0x0) 09:02:25 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x143501) writev(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)="fe", 0x1}, {&(0x7f0000000000)="e3fcae9a3af1f06b567fa000110cf1a4c8208279ba20a84f162f1532bb59ebf2969fdad4884fa3f4ba63910fd7f4262f4e653683137a13f660287f84dc0d2004b40d2839b6e9cc98aab95b15a8f965c1baed9ce1d21023be98e42baa4dfc8482da3a2a86cb4a662321958d06381ab56e110f8c772d1a015a408df287a57593d3804e3446555353f16bcf5670732cb9", 0x8f}], 0x2) 09:02:25 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x4e, 0x0) 09:02:25 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x42, 0x0) 09:02:25 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syncfs(0xffffffffffffffff) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$P9_RCLUNK(r5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000040)=0xfffffff8, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffff7}, 0x9c) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x2) [ 1022.816381][T11697] qrtr: Invalid version 254 09:02:25 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r3, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000011c0)={r3, 0x13, 0x0, 0x3f, &(0x7f0000001140)=[0x0, 0x0, 0x0], 0x3}, 0x20) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x6, 0x3e, 0x28, 0x80, 0x0, 0x9, 0x284, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xff, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x2, 0xba6, 0x5, 0x9, 0x7fffffff, 0x8}, r1, 0x5, r0, 0x2) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:25 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x4f, 0x0) 09:02:25 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x43, 0x0) 09:02:25 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x44, 0x0) 09:02:26 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x8080}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) fcntl$dupfd(r0, 0x0, r0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r3, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000001140)={0x1, 0x7fff}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000080)={0x10000, 0x4000}) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mISDNtimer\x00', 0x7ed56a4dac5ad0bd, 0x0) preadv(r1, &(0x7f00000017c0), 0x218, 0x0) 09:02:26 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x50, 0x0) 09:02:26 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:02:26 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/1, 0x1}, {&(0x7f0000000140)=""/191, 0xbf}, {&(0x7f0000000200)=""/180, 0xb4}, {&(0x7f00000002c0)=""/84, 0x54}, {&(0x7f0000000340)}, {&(0x7f0000000380)=""/36, 0x24}, {&(0x7f00000003c0)=""/191, 0xbf}, {&(0x7f0000000480)=""/59, 0x3b}], 0x8, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r3, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000001240)='/dev/hwrng\x00', 0x20040, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000001200)={0xb, 0x10, 0xfa00, {&(0x7f0000001140), r4, 0x800}}, 0x18) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:26 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x45, 0x0) 09:02:26 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x46, 0x0) 09:02:26 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x51, 0x0) 09:02:26 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xd7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x5, 0x5, 0x91, 0x8000, 0x4}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) msgget(0x1, 0x0) write$P9_RCLUNK(r2, 0x0, 0x0) ioctl$HIDIOCGVERSION(r2, 0x80044801, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r3, &(0x7f00000017c0), 0x218, 0x0) 09:02:26 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x47, 0x0) 09:02:26 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x1, r0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000001140)={0x9c0000, 0x8, 0xff, r0, 0x0, &(0x7f00000000c0)={0x990a95, 0x800, [], @p_u16=&(0x7f0000000080)=0x40}}) r2 = syz_open_dev$evdev(&(0x7f00000013c0)='/dev/input/event#\x00', 0x807f, 0x18a03) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000001280)={{0xc4, 0x2}, 'port0\x00', 0x0, 0x100400, 0x5, 0xb1, 0x7, 0x0, 0x28000, 0x0, 0x6, 0x4}) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = syz_open_dev$evdev(&(0x7f0000001340)='/dev/input/event#\x00', 0x7a, 0x2) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$P9_RCLUNK(r5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000011c0)={0xfff8, 0x0, 0x71b, 0x1, 0x0}, &(0x7f0000001200)=0xfffffffffffffe8c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000001240)={0xffff, 0x8000, 0x0, 0x800, r6}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000000), 0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000001400)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x64010101}}, [0xff8a, 0x5, 0x0, 0x4800000000, 0x6, 0x22fe, 0xfffffffffffffffa, 0x3, 0x100000001, 0x1f, 0x9, 0x3, 0x518c, 0x3a, 0xfffffffffffffff9]}, &(0x7f0000001380)=0x100) write$P9_RCLUNK(r3, 0x0, 0x0) setsockopt$inet6_dccp_int(r3, 0x21, 0x10, &(0x7f0000001180)=0x1, 0x4) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r7, &(0x7f00000017c0), 0x218, 0x0) 09:02:26 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x48, 0x0) 09:02:26 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x52, 0x0) 09:02:26 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x7) 09:02:26 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x49, 0x0) 09:02:27 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x4a, 0x0) 09:02:27 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x53, 0x0) 09:02:27 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x90200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000002240)='/dev/ocfs2_control\x00', 0x111001, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000001140)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000001240)) ioctl$KVM_SMI(r0, 0xaeb7) r3 = fcntl$dupfd(r1, 0x0, r1) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r3, &(0x7f00000011c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000001}, 0xc, &(0x7f0000001180)={&(0x7f0000001200)=ANY=[@ANYRES32=r1], 0x30}, 0x1, 0x0, 0x0, 0x4000804}, 0x40881) write$P9_RCLUNK(r3, 0x0, 0x0) write$P9_RLCREATE(r3, &(0x7f0000000080)={0x18, 0xf, 0x2, {{0x2, 0x0, 0x4000000005}, 0x1}}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0) 09:02:27 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:27 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="9ba40e9eb6f454794ce49e6211e4a10a8abbe6439f968a10de5e6ce04c53fbfd5a77b821c44dd7a98d04a00806a903ae733cf930b2bdca7d2f442c95069fdc7915ec793c7635683cff775430c6e8e692d77f8d9514072adf7e869ae177960bd5d21367d4d36d775faca11b0e740b43bd6b13f5e8b50b260a3a1df47b7cfe5cbf204d158b0cdb5f421a27cf647474948d3830794920af91be6e1a3797036e11b2fe64b65ddfc3eb936e5416daf5cde5e694a2ce33c0f1539c30af9e50972b1477b4a1636837bf4cfe0ea756c3fd677b839098e98506652122ea09c36be78781167f79e0fbacfd54f2c6428d4beb42f332a12cd184e8cae782c34e91f2e414366f5c8cb3000bfa497ba3b9063f58b3a15ab741e13a5c24dac1a54c396713b7be6eda4713cfc87c1eb5e9b2e7352274340b87e4686befe5d4cda5793bfb9f3168101145e93067fd799f8da10d4c741e3a29a2b3ab1cf71ef05de04e6aeb1d0c4ba7623dadc197d73acbddb755b45d3649e2e6c901284786fd526135c8509bdc4ed4e435fce7f2c3ad5ae250971538bbe74cedba5d4d95c599931762b576b8d0f33ba5e3e3d18abc74d2d120d41c10d1d5acb30ea76500ada9542a0642771c3aa2a8bec064a471660d0204547ddc0f45efeed1b68edddfc934b2e9177d1f33ff4e59fdda741d353f37ce50c0a97ccc0ff0ca15392c0dd44fd0fcd91f73130f6dc38c133bb56e381b2f7ce8fd38213b474b9b6fd8127b5c16b689d5b9f3705caf3f9b89fccb34a92b162189cd58eac94a4d9ba34e684f69e1d034efd63f56aa5bb12d865a71937bbed334e411609aca8e4c54e0548a4296fbdbd7609d55eceea6abd6cdb15161104b983d427fb17bcfbe17d56248804c5821e819294998a1075834a35a9febc5761f2f8b57023ecffa9f8ac210de65aea5bc41dc9e0fe69db41434fc3866f7d483fe02990b6c937c5e9e62cbba3379f7d8b49cf3596c024bb31ba7a8c01ae27ad2770d56f64514b6825ff70dbcb3a819af9770481ff9cffada6c05103be7419bb83f0b4fdab97cf294c88c878a762495ccc6fda5e88757adeadec1ee2ecc970bd0c0e33f51f0f969e1f453582fe26f75608cb85f2b864dd04c4fbf003cd2414a3ba814c5302b7df1d8d833d0347382d29aca4d002a4c3840714b61cd14844a154cbed397777c222b999d8e535a58de5a5e62419782750345ae00fea8e09455953cdf777f9167ddad9f8f006217afebae86eb0d3d897be6c4338d2df11c761849c876d7d1cb117eba153b64bc88c20adaab4bedd40492fede0162b09b07f90eccac1e5ccf7eac5b5abbef3ed6b0e482eef3745ce2e87557b088a946c50867f410ce138079aaae215f82fdfe8d71c1432a01d0c96e8bbe96b092d134dc42b89b9bdd5cf25299b60e08b5c2b8f3ca9934d76052d323b18f2f34c28703326a6d48ae524198cfc6bca4687ec08b75fcd53197b97a140d46936716a3839d12199386e0db6e8ebcb4a9635d153c3d90b6cab02113705bfedcad4bb0f0263230aaa990b711d2999dc1d4c9054f6215770640911f641dbbacb6eb9031985d2aa28f0fc717768ddf2994ba973e8cfa9b6d80f30fb1abf3694c3984d8395ddf2b8a5fe3e494d99c0d960be266b00f8028d04085c5822a98abc6a70b672816c769eb16fa5686997f7fd1e6652cc86c4db690f0913ba4c788f6bd6dd398490067c50b870246933a8bb19e6299f0276f9f7fa80d89b44c32b62caac2434f28b8b7a0582c5c86b94a315b2070ca8e90501c9344bba86741581e3890627f54c31deabff159c26db8d663ebde8f450b8dd32552be65e4652063ee35f23bc908578325694b90df50040fc6d00b535a4aea759b9159c6c1ad35774cb6adb683a43eca1b4d7877f86569611fbf35b7599fdf787daebca7cf3e5d7d0e7881241981b3e4115143449e4c61df485d0c9cb0547125ebb55984fe8527a32eed0ab0e28be38e4bfad740c23d4b5ac0b89977b676b01191af5ffde1b57f5f269d37e24422d8fb714d3c548a9a1240fe2f2243ca3601c5a41bc444f554b5e8da160247e9aadac86af59625462777843e0787244a8138d900caddbb73b0cc7f47c93b19485e24b49c919b1f26d27cc30988f8bb40fd65641d73291b37373204370660b36fa88ff200b89b3ec974145fb4eeb73dbdd910b25bc06fd6dcb0602c3246d354e6f6943719ea5a2659f43333e467dfa05c288b5481b3db0cd40a51d5d9355cc9e90bdcbba978d412625c8a92699f4f64c48c5a00830e1812accfc6bb344271c4e68d62677caf192aef7e919f16dd3e3ec98100746f864e18763605dcf455a39f04c6f8f5c2feceed0ade609631eba1b41340a01fcbdcb1a2f0e451bcb5be9547c36767d743c15a088e98c751f8c35f0cab4a713b10e9547de5a9ff2ffbaae60dd3fbce5eef46abd30b0cca42c703abbdde2736d464d8768a35f7d36aed8a400bfd83df18048b29c0a00889698dddd51d80f96da4dd6cd120e4a8fd146ecf30032369142dcd098a2372bed1b18409ecc6df3714dca891a92d796e3c9d55725b8bd607da77776748711c70eaecddd0a86c450e6534b6c2f8e4daa626ea608e2923f085e143f5d9e037938d548231faa62658795bf94eee337c79a3b4a9cbfa01cfb887a944bf7468da7f65a529a713d1b6d0736188b93a15fd8f10e280d408190747200526ddba162d697a45ccadffa9feeaee3b94861bc4909a4056ac4cdfa12559510abc6c4454a9075a45707bea75eee7a3e0e48500682a47eb15d5c97ae8788d5f2e828c532df3c94788478c084796614421ba1449cba95833b0f82fd2b48d48c2b682cf3b1839c8805193238702f782ad9570c764880a761f67af07c4c0193f58f4dff11ac05cbbf6e9fb449013fa3a242fb848914d7f7827a7abc78651d570ba007fd13fb6ef55f1f37aa4dd97a50d0fe1db425522bb21e9f032b618eaf0ca69c201c552e11eb656692f72584a6a2056e9feb61ff5186fc5928c8892ad15cfe76b5cb2ea2cfdf18e0269978238bfa9c83a04042f4b458ae091d86f7a68b8ad64ab7a7314606ef2c344c6e7b4a97630d37586d9b8c7ea38ba501e010ac99209c6a9e50c5b2e26ed24d2c04c9c4366b1b3528dcb84570179ce167ab2edaf5b7c490b5c949f2b58a8d98a2cb308b9b1fa8ed49d08da6ca329cf247c9d30a84c5c5a39e3b9e336d588b9c9e2e4d187c7cee8e1825f80dd091d193d0651b8cfc65fe984d932226d16a23d70607366d16c64b09305c84697a605ba26e4a62a9de6f509831ffff365598c42696eaf72432ffda78f645848c9ebe7285ce105e5e89429ec27e5666b15c2c4ab527d0f8b366ae9380ea06d9773c5c6b46ad7ffa35c6dd43483b608404267d64177169574588c4ce3c314ed5b17a56b2d2b58dcf30d0fc68340b16c4da068b675cd6fa817e7adc61298613d6bf93a1418ada45511d79afb11166b60baf05a788d3c8118a731210c65c0f8d43fd8a7c9a2cd9dba4d6bfcee5bf71202335ed6661ff7bd8d84a47fcfddd2c497a99cbb688a595f35cd1000d2ffb4b1581f08d61e6f9bd17c462e923b98eec0ff7d73d116df6616c185f6e019d8a54ec6b32ae5646289b9f1c7a7b66a3fcd0ada9b4cb402b8133adb5cdf5fcb92322059f53961ee8e02b3eceec0ff2b16c39868ca9dbe8d3d3b994163008bf1b3295e9f7181916c38bb7f6908dd6a41bf5def4aef768ce22c5b5942d0a575c3de1700ba2ef32ebcafafaf67129d979203edcc4856c0ba8e7dec3f9de649c8474c639553a34a6c975fa8d03573981a1ea75e82078e09c251a7a784889208b21789135eb31e89af917e4820fd9f7cf8f0e410cd8a55d260200b19c413c6bc000877c172e3003dca36cc0c6520f30c14c42860fc414e79e9b7f8f76637f63c51e47a5845d9f7188f7ead514113df4340d448868e6a1f0a40906e8e9cdb45d93859e47efb1c2da461f5e99fb2b305eba8936c6670d31eb4a3b37adc3ca6a1232300759c62a905f3f58e8de4c742940dd9ed9f2f3bfac6996330120ba0e3953a1d5a65fa7d7b9fa02678571f1f6ac92bce74d33589df7d7b9eaba93f0d3838ce3c54c6988f11b70619ca528ccec0143c092657e3e04652d5f9e9e29455da05f993a01622edc0adb04dfdf7ec9cb2e016466fd6b1bcdd1d8f3195f440aeb61e07c207458dc4ee1d51cd6ea425b710befdf2ea252980f526e45063fc5547c35a0d502d749b190eccbda8a19821af396b5209e4cc8caecefaa6a8f86125e8582e02d29805dacc49e1b6305e85679f7d1fa403637cdc96b0d2322da72c52a653ea793e52ebb3e7485b7a83cecdefa7440c66e59e19dd523bf4d56e03c3875aff1f01d9048b7e68a431f41ac2aa376ac04a20f201d23a330b46c05c80e7ec1a945295e0d8a251885a029cb7d3cbe387e6122775b54926fafaef70b705de6ee1a561aa45a71921fc3c0963df01356231d5dfee387b21d0722a5e6b08d1dd8d682b9f73079c58773cd580b3c388ec9581439b0525aa64ae8bb85d6c3d8a39912e00b26c08fa9935502d5faffc6a5173a9b6938948816435d7b464a934f9c9fe6787b534c0d00225e3afe954a10013abbd5a61f1a0531a40e36fcf874b268ed7bf96833499564761e05219673d07a0325b5bf149217af687e15b53a408d70609f03286d1bb8c76db8fb53a82c3abf04d5046cfe26a2363b83d3c1abc9b8ee792036d000c6f5d5f8cc05278bf0c3b1029a74d0c34c6026488bfb61d1bac12b9116f60fd9c046d5a17142b24d53f09d128fff9d79369285e30bba765432c256268bfcdc04a805a334442289f5066a0a59121e6900a3db10d8af51af0ac1659de7109d2f803eeae18837a781e53f996b6a4cffc397960a7cc9472036fe3e3d5948c79167eb85f8aa5e12a2a5984e495aa59fbf72b81e0dc2f2214cea8fe5aa5aa5face185cfdd0f19f4478eba7d73868698bf7bc4bf5a18b4e26c3584e33e83956885c254f492b676080091201c8542122b8a9fadc9a47007033ffde14bfd31484fe87963b3506608bb75fead2012adfcbe19af2f78bce1b5f7d1b5998be6bf013811aa532010dfbe7cc60afac35d33b097cb6fc00af03be90e5abbf821b76e60f881d550dfcccbdc31d1a16d4d79317a598f8e0501ff8149f0c7e65d517d6b5c787bea7316e555dc45791722e811f91509accc34a5e89a38868037fe0e542a27ff9140e86a0ec930762e260f0b6ec190493253f3eb05c0e84b8fc0387bd4e182d1392292195102f854ee759f26b6aeb91c738b3df36ea8b09fdc1a9b1089c3038bfe5da17129fafe2c5f1d3287ff8f08db348bd0be4affdf8c1fa5fac34f5114eec35eefcc5cb290f1b8ece8476b2a1916ac20c8799ef66501c05efd5ea7bed4402b3d0bb6c43da558309facdeb54ea5f2057b03ac34b59ce06fdaa8e11adbac6446cfe3f049bf0799a6ba0a3b8bf96bbe92729cf4742a1fa2ec969245e9ec0b6f2e4ea35a60389dc9607323362958a0bb54721f7159c353bd8c25467625803b6a8b1560c08d765dd8a5026921fd6db9acbf4bcddd39490d1a8294d3bd76f98b1877add8a3024826f8d8f8f60a496453cf4d9d75af6c7351ef2d4c42bb1e28d300aa30f0f8585fd7fc76b3967785a50a81ca10b5fc42b033b4fc54b9cb4c181679e933d6be4ea2edf3c87c6b02b02f5424728f67df233685f3464fca49e1dd0111ad2c8fbe6c638359043ef9f45906f6e3ebfcd74f73284602f428d0cc1dffb7922d2ad9270443d7902b19e2e2", 0x1000}, {&(0x7f0000000040)="cf3856beec92f360ba27d99d07835fad51d38a4ae1bb4e", 0x17}, {&(0x7f0000001200)="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", 0x1000}], 0x3, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x80, &(0x7f000005ffe4)={0xa, 0x4e23, 0x630f, @loopback}, 0x1c) shutdown(r0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20000000}}, 0x0, 0x0, 0xfffffffd, 0x0, 0x40, 0x10000000}, 0x9c) r4 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x262002) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$P9_RCLUNK(r5, 0x0, 0x0) ioctl$NBD_DISCONNECT(r5, 0xab08) 09:02:27 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:27 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x54, 0x0) 09:02:27 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x4b, 0x0) 09:02:27 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000001180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001140)={&(0x7f00000000c0)={0x28, 0x1412, 0x1, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) fcntl$dupfd(r0, 0x0, r0) fcntl$setlease(r0, 0x400, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r3, &(0x7f00000017c0), 0x218, 0x0) 09:02:27 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000080)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001240)={0x14, &(0x7f0000001140)={0x20, 0x7, 0xf1, {0xf1, 0x2, "43d23ee303accdf813856e278f4d2cbe0d68de2ce0d9c57ec911c4852c5cee694efc2680110d2b31e5858239feea7b16e35181b935e0eab3f86210e71c6a405d0abc760d30359e92913dbab3e564d8ab77eab181e22751aa3657f6b0c4ec73a06c2023af9405f7278ec337afb749d9b44adc96ec34cadf86d91a1e856d942f210e600365eed749d6b50047d65827b9f6494077046f93ef466d9c2f74ab7450d46903e2385229538653a9ba64ed62b9c38e59fec354dec2ea2d6a25a58f0a0fe282279aaae81326c78244f0aff38e1c6f9abe65d0f1decf7a6dc44b534f65b668b2fae7c8a255b394d24db27aacf998"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x810}}}, &(0x7f0000001480)={0x44, &(0x7f0000001280)={0x20, 0x15, 0xd, "de598b3e2823f4fe3e73e44511"}, &(0x7f00000012c0)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000001300)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001340)={0x20, 0x81, 0x2, 'I\\'}, &(0x7f0000001380)={0x20, 0x82, 0x2, "d5a1"}, &(0x7f00000013c0)={0x20, 0x83, 0x2, 'Q_'}, &(0x7f0000001500)=ANY=[@ANYBLOB="16840a0000009c626df6ac1f3c6f197fce710a7166f1b0a3b97e1172c801bce9267e30484b02e3a7eee1f4e53c985bf317424ff5df7e084c2681f24135d5e2d1c94e16"], &(0x7f0000001440)={0x20, 0x85, 0x3, "7946cc"}}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0) sysfs$3(0x3) 09:02:27 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000040)={0x9, 0x8, [0x55d, 0x9]}) listen(r0, 0x4000000043) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) r4 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r4, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:02:27 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x4c, 0x0) 09:02:27 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x55, 0x0) 09:02:27 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x4d, 0x0) 09:02:27 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x56, 0x0) 09:02:28 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x4e, 0x0) 09:02:28 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x57, 0x0) 09:02:28 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000080)={0x1, 0x200, 0x10001, 0x9, 0xfff}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x51130, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0) 09:02:28 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001a40)={0x0, 0x0, 0xa6, 0x1, @scatter={0xa, 0x0, &(0x7f0000001800)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/153, 0x99}, {&(0x7f00000012c0)=""/182, 0xb6}, {&(0x7f0000001380)=""/227, 0xe3}, {&(0x7f0000000040)=""/84, 0x54}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f0000001480)=""/225, 0xe1}, {&(0x7f0000001580)=""/152, 0x98}, {&(0x7f0000001640)=""/161, 0xa1}, {&(0x7f0000001700)=""/247, 0xf7}]}, &(0x7f00000018c0)="54121601d44b1befa2df55e9ac90d7177bb3d6e877bd2a714f64a624289a2d5ab6564e18cbf9424b468e048f47ef460924c55e83889bd89cfce28cefb7fab141ad64fcf0808cf9350c4273fba1b060f8c1aa28e79e608fce64ecbba35c2a05a5830b920075c0193efc79b33053ace659cedf4a82b5232155d61287485c8e28d893234874663f991b0cc761d9499f3d91a94404986816de219a354ef8bf95c14a79a11dbbb567", &(0x7f0000001980)=""/86, 0x3, 0x4, 0x0, &(0x7f0000001a00)}) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:02:28 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x4f, 0x0) 09:02:28 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x58, 0x0) 09:02:28 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x8000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x2}, 0x0, 0x1, 0x0, 0x6, 0x9}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:28 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x50, 0x0) 09:02:28 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x59, 0x0) 09:02:28 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/108, 0x6c}, {&(0x7f0000000100)=""/97, 0x61}, {&(0x7f0000000180)=""/9, 0x9}, {&(0x7f00000001c0)=""/203, 0xcb}, {&(0x7f0000001240)=""/4096, 0x1000}], 0x5, 0x1) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000380)={0x18, 0x0, 0x4, {0x7}}, 0x18) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x6, &(0x7f0000001140)=""/246) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000340)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r1, &(0x7f00000017c0), 0x218, 0x0) 09:02:28 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$P9_RCLUNK(r5, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r5, 0x800443d2, &(0x7f0000000040)={0x9, &(0x7f0000000200)=[{@none}, {@fixed}, {@fixed}, {@fixed}, {}, {@fixed}, {}, {@fixed}, {@fixed}]}) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000191000/0x4000)=nil, 0x4000, 0x2, 0x28011, r5, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:02:28 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2e, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:28 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000080)={{r0}, 0x100000001, 0x800, 0x1}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r3, &(0x7f00000017c0), 0x218, 0x0) 09:02:28 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x5a, 0x0) 09:02:28 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x51, 0x0) 09:02:29 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x5b, 0x0) 09:02:29 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x52, 0x0) 09:02:29 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x41c1, 0x4c180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) ptrace$peekuser(0x3, r1, 0x400) r2 = syz_open_procfs(r0, &(0x7f0000000000)='limits\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0) 09:02:29 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x53, 0x0) 09:02:29 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x5c, 0x0) 09:02:29 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xdc98}, 0x0, 0x10, r1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r4 = syz_open_dev$evdev(&(0x7f0000001180)='/dev/input/event#\x00', 0x2000000000000000, 0x402) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x1) r5 = fcntl$dupfd(r4, 0x0, r4) write$P9_RCLUNK(r5, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r5, 0x6430) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2000, 0x0) preadv(r3, &(0x7f00000017c0), 0x218, 0x0) ioctl$VIDIOC_ENUMSTD(r5, 0xc0485619, &(0x7f00000011c0)={0x9743, 0xb000, "c34e0abf06c01788c54b3d2b55f1b4037c19de385bb0e636", {0x9def, 0x8001}, 0x3}) 09:02:29 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x54, 0x0) 09:02:30 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r7, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001400210100000000000042aa4d9fec0000000000009691a4cb29b457acd79257ff257aa24c07e9ccd1d18153d9df2d10a95d24957ce628172abd5cca2a213e6259c9ed7bf20c6253414ffedd8b2c6cce674fad78", @ANYRES32=r7, @ANYBLOB="14000100ff0200000000000000000000000000010800080019060000"], 0x34}}, 0x0) sendmsg$xdp(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0x3, r7, 0x18}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000200)="32d89f7a9725fcd22e831cc85fdbac00d699f7a58f397679b94880f143a858498e66694a951a12dc288cddec099b303204216229327542d2283f7474cf0dd0585874fcba1356ec41f4c088fca896c96a493a69438e98c5ace4f2687275bd87166e7a85b3d6e3f974776c252febf53ec256293e", 0x73}, {&(0x7f0000000280)="1381917b8744b3c94d6beea72c4b1fc912b0f582e6b02fe1979c6b84cfa795285d82349d8b22af546dea391efb165d5ffb823c0739824431fe2d61e5aff6cf6575ce50c7abdc693d3503c4de31e298b354036e6da24d61a3426e2679780fe9d2ad60b2ab710b718ddeb6fa1c57150ffd034d43a9d16989dc22", 0x79}], 0x2}, 0x40005) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:02:30 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x5d, 0x0) 09:02:30 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x80000000) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x7) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r3, 0x0, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r3, 0x3b71, &(0x7f0000000040)={0x20, 0x1, 0x9, 0x9, 0x948d}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0) 09:02:30 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x55, 0x0) 09:02:30 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xf, r1, 0x2, &(0x7f0000000040)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000080)='fdinfo\x00') preadv(r3, &(0x7f00000017c0), 0x218, 0x0) 09:02:30 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:30 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x56, 0x0) 09:02:30 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x5e, 0x0) 09:02:30 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x57, 0x0) 09:02:30 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000001340)) r3 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r3, 0x0, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/4116, 0x1014}, {&(0x7f0000001140)=""/249}, {&(0x7f0000001240)=""/216}], 0x63, 0x20000006) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xd0c}, 0x0, 0x0, 0xffffffffffffffff, 0x8) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001480)={&(0x7f00000013c0)={0x8c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x800}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x20}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x59}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40002) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0) 09:02:30 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x5f, 0x0) 09:02:30 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x32, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000001580)={0x8, 0x8}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x40) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) process_vm_readv(r3, &(0x7f0000000000)=[{&(0x7f0000001140)=""/249, 0xf9}], 0x1, &(0x7f0000001500)=[{&(0x7f0000000080)=""/7, 0x7}, {&(0x7f0000001240)=""/225, 0xe1}, {&(0x7f0000001340)=""/80, 0x50}, {&(0x7f00000000c0)=""/61, 0x3d}, {&(0x7f00000013c0)=""/159, 0x9f}, {&(0x7f0000001480)=""/85, 0x55}], 0x6, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$P9_RCLUNK(r5, 0x0, 0x0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f00000015c0)={0x1f, @none, 0x9}, 0xa) 09:02:30 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) ioctl$SIOCAX25GETINFOOLD(r2, 0x89e9, &(0x7f0000000040)) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$P9_RCLUNK(r5, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000080)=0x7, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000200)={0xac8f, "ecb7b10870174e8deb1690c3b66c6e086d8336deaebc6179beff308c8178bc4a", 0x3, 0x40, 0x2, 0x1ff, 0x8, 0x3, 0x4, 0x6}) 09:02:30 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x58, 0x0) 09:02:30 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) unshare(0x8030a00) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:30 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x60, 0x0) 09:02:30 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x59, 0x0) 09:02:30 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:31 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$P9_RCLUNK(r1, 0x0, 0x0) sendto$isdn(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000010000001d77c14a52aad20793c55ee6f430d2f2d0e9455b95e31baf15b0976a03080083ef59a998369edef1610ec0e32808f99d7d95f11f0f254256146ec86486ad29eab35afa0cf4ea35f5fddcaf19970afc8db984c9ac98890cabef2bcc38cd4856a8025353ec963e2ed138d33f3344d12bbf751a84f7e4944e8d06d14ab686859745e535085a504774228dedba373ce0ac30b99e8facb6dc32ab190bffece08776dd254e206c7ed19af738b963b0a14791"], 0xb7, 0x4000, 0x0, 0x0) listen(r0, 0x4000000043) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f000087dffe)='F', 0x1, 0x4040844, &(0x7f000005ffe4)={0xa, 0x4e21, 0x0, @local}, 0x1c) shutdown(r2, 0x2) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RCLUNK(r4, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) shutdown(r5, 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:02:31 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x61, 0x0) 09:02:31 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x5a, 0x0) 09:02:31 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0xffffffffffffffff}}}, 0x90) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000001140)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x4, r3, 0x1c, 0x1, @in6={0xa, 0x4e22, 0x1ff, @private1, 0x2}}}, 0xa0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x17) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r5, 0x40044591, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) write$P9_RCLUNK(r6, 0x0, 0x0) ioctl$SNDCTL_DSP_POST(r6, 0x5008, 0x0) 09:02:31 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x62, 0x0) 09:02:31 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x5b, 0x0) 09:02:31 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, r5, 0x536ae464467e3e0b, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x26c, r5, 0x2, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5}}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4c084}, 0x4c800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:02:31 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x5c, 0x0) 09:02:31 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x63, 0x0) 09:02:31 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x60000, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000080)={0xa, 0x8, {0x52, 0x6, 0x0, {0x73c, 0xfff9}, {0xe3, 0x1}, @ramp={0x1ff, 0x4, {0x2, 0x4, 0x480, 0x7}}}, {0x57, 0x8, 0x9, {0x1, 0x101}, {0x6, 0x8000}, @cond=[{0xfffb, 0x1ff, 0x9, 0x20, 0x20, 0x5}, {0x0, 0x1000, 0x1000, 0x1, 0x9, 0x9}]}}) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000001280)=""/4109, 0x100d}], 0x1, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) sched_yield() write$P9_RCLUNK(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000001240)={0x7f, 0x1, 0x40, 0x0, 0x1, 0x7, 0x80, 0x3, 0xa7, 0x6, 0xff, 0x80, 0x80, 0x9}, 0xe) set_mempolicy(0x4000, &(0x7f0000001200)=0x7fffffff, 0x8000) write$P9_RCLUNK(r2, 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000001180)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e20, @remote}, 0x0, 0x0, 0x0, 0x0, 0xf000, &(0x7f0000001140)='veth0_vlan\x00', 0x38741ad, 0xfffffffffffffff9, 0x1ff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r5, &(0x7f00000017c0), 0x218, 0x0) 09:02:31 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x5d, 0x0) 09:02:31 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x64, 0x0) 09:02:31 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x60c0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xffffffff, @private2}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x17, &(0x7f0000000000)={r6}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r6, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x35}}}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2}, 0x9c) 09:02:32 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x65, 0x0) 09:02:32 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x5e, 0x0) 09:02:32 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x100, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:32 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x5f, 0x0) 09:02:32 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x66, 0x0) 09:02:32 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x67, 0x0) 09:02:32 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x60, 0x0) 09:02:32 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f0000001240)="8d96801be121c5f3d17da12e573e3132069abe8954d6fbb4ab4d9c4393abf1e602322295b73d8423e378f20285c6432c", 0x30}, {&(0x7f0000001280)="321166f3f536b231f4e8438bcdd80a2323807fa8fd207fa76cc830dd3888345de879f54889063f0a9d6a80b0e402cb2e703199d33c8f02acd5dd42112d09fdb9f8d2d3a14eb972b3e42ed2b80b0b2966f43f948fcadfe935cb98c78e6e7991518ff76e184f7419acebfbb2bdd140549334f9d871dc66c92ad051bab418adc053fb777928566b481dec920300288f735f38b169c83d330d5bf960377ea4386c84aaec80bb1b048f0bbc2e62e5b3e0dd25002c0624775dc27f96a52783f41acb4365a5e4c0447411ac4f7454a0", 0xcc}, {&(0x7f0000001380)="c2e1d819f96d3f5acc3aec01962b9017ba605719bb471a7c201e5c1588d284c9da0e50af2bde77df72007b8dbc4c7420f9b6c13a6aa225ae48e58f3d18af80615043e8fcd0aa3430067e8185ca7c7c6efd2c392ffb46af99c9393a907e53cbc06095bbdfac619182974ecffae39327cff99bae4adb39b2d80fe93fb4d2469c3aa0d3823f0dd0fa6cf7e1b6f3e677e5fc4faccf93a611341c685b", 0x9a}, {&(0x7f0000001440)="e1de0fc44b9191bb", 0x8}], 0x4) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}]}]}, 0x44}}, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000001140)=[@in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0x3ff, @mcast2}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x1, @private2={0xfc, 0x2, [], 0x1}, 0xb1}, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, [], 0x26}, 0x1307}, @in6={0xa, 0x4e21, 0xd2, @mcast1, 0x7}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @private2, 0x5}], 0xcc) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r5, 0x40044591, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r6, 0x40044591, 0x0) fcntl$dupfd(r6, 0x0, r6) r7 = fcntl$dupfd(r5, 0x406, r6) fcntl$F_SET_RW_HINT(r7, 0x40c, &(0x7f0000000000)=0x3) 09:02:32 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x61, 0x0) 09:02:32 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x68, 0x0) 09:02:32 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x69, 0x0) 09:02:33 executing program 3: removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000001140)=@known='security.apparmor\x00') r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) fgetxattr(r1, &(0x7f0000001180)=@known='trusted.overlay.nlink\x00', &(0x7f00000011c0)=""/51, 0x33) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x102, 0x0) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0) 09:02:33 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x6a, 0x0) 09:02:33 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x62, 0x0) 09:02:33 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$P9_RCLUNK(r5, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f00000002c0)={0x8, {{0xa, 0x4e20, 0x8, @private0={0xfc, 0x0, [], 0x1}, 0x40008}}}, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x104000000000000, 0x40, &(0x7f0000001a80)=@raw={'raw\x00', 0x2, 0x3, 0x1210, 0x0, 0x10e0, 0x10e0, 0x10e0, 0x0, 0x1178, 0x1178, 0x1178, 0x1178, 0x1178, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x10c0, 0x10e0, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @common=@unspec=@cgroup1={{0x1030, 'cgroup\x00'}, {0x0, 0x1, 0x0, 0x0, './cgroup/syz0\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'team_slave_0\x00', 'tunl0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x1270) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r6 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r6, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:02:33 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x63, 0x0) 09:02:33 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x6b, 0x0) 09:02:33 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0) [ 1030.744303][T12073] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables 09:02:33 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x64, 0x0) 09:02:33 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x6c, 0x0) 09:02:33 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0xec, 0x282) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000080)={{0x3, 0x0, @reserved="cae10905d83f44f0e6215e45ed326fdddf2e09faa6ca57fdc2287f924d235579"}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000001140)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r1, &(0x7f00000017c0), 0x218, 0x0) 09:02:33 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x65, 0x0) 09:02:33 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x6d, 0x0) 09:02:33 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @multicast1}], 0x20) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:02:33 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x66, 0x0) 09:02:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) getsockopt$nfc_llcp(r2, 0x118, 0x3, &(0x7f0000000000)=""/57, 0x39) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000480)={0xff, 0x13, &(0x7f0000000080)}) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:33 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x6e, 0x0) 09:02:34 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x67, 0x0) 09:02:34 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x6f, 0x0) 09:02:34 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x68, 0x0) 09:02:34 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r3, 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000040)=0x5, 0x4) shutdown(r1, 0x2) r4 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r4, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:02:34 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x69, 0x0) 09:02:34 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x70, 0x0) 09:02:34 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x71, 0x0) 09:02:34 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x6a, 0x0) 09:02:34 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x80800) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) getsockname$unix(r2, &(0x7f0000000040), &(0x7f0000000180)=0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:02:34 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r4 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x24, r3, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY_FREQ={0x4}]}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20008004) preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') getrusage(0x0, &(0x7f0000000080)) preadv(r8, &(0x7f00000017c0), 0x218, 0x0) 09:02:34 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x72, 0x0) 09:02:35 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x6b, 0x0) [ 1032.384131][T12147] netlink: 'syz-executor.3': attribute type 38 has an invalid length. 09:02:35 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x73, 0x0) [ 1032.529620][T12155] netlink: 'syz-executor.3': attribute type 38 has an invalid length. 09:02:35 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x6c, 0x0) 09:02:35 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x74, 0x0) 09:02:35 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x6d, 0x0) 09:02:35 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x75, 0x0) 09:02:35 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x6e, 0x0) 09:02:35 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/xfrm_stat\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RCLUNK(r4, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r5, 0x40044591, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) write$P9_RCLUNK(r6, 0x0, 0x0) r7 = pidfd_getfd(0xffffffffffffffff, r6, 0x0) ioctl$VHOST_GET_FEATURES(r7, 0x8008af00, &(0x7f0000001140)) getsockname$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000000)=0x8, 0x4) 09:02:35 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x76, 0x0) 09:02:35 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x6f, 0x0) 09:02:35 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x77, 0x0) 09:02:36 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe), 0xffffffffffffffea, 0x2000c090, &(0x7f0000000200)={0xa, 0x4e26, 0x20000, @private1}, 0xfffffffffffffe1b) shutdown(r1, 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x17, &(0x7f0000000000)={r4}, 0xc) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={r4, 0x4}, 0x8) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000080), 0x4) r5 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r5, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:02:36 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x70, 0x0) 09:02:36 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x78, 0x0) 09:02:36 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x71, 0x0) 09:02:36 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0), 0x0, 0x4) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000080)={0x7fffffff, 0x1, {0xffffffffffffffff, 0x2, 0x67, 0x2, 0x8}, 0x7}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0) 09:02:36 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x79, 0x0) 09:02:36 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x72, 0x0) 09:02:36 executing program 2: writev(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000001140)="b6bf187bce644469fb46872d7217b9edbe8680f970c4fb65ba911fb68dfdb5cb0ee42b69b0eec8a79cfd9cc444ddceae0b74c1a41fa6ba577cb06cf897efc38d4a5e1c5f42c54284084f5c672dc96b2f6eae40f9743acf3ad1dc1c6b7e8353c9566cb74e665dffc4cf30b0b032eee9f6239572b9763c4b7809b63279d3454d35a42fccf96d091574309cfe2c4ee023377c488bceec5ed0c828eabac8b36cd1878babfa6c7dd97572c158ba7fb0fd529b7d18a6912e996952c0216766d2abeed11979f1a7c0a2f6d3823d2602efd8e2", 0xcf}, {&(0x7f0000001240)="ab40c937b5b87c519ee4e1d9e0a6f2632d67761003779d3c2dfb13dfddd0e3142d5f7f784cad367158e14588d5787e6530a9f42645722c788f98f938a81ba49e20f8c5eeac90c9bda016f47efa227446128cb0e07a84ea09741e35244ad15f89a729", 0x62}, {&(0x7f00000012c0)="c737467bd818b9e079077cb7dfe81961c357f35298c37b408f98b024a3f782d9958bc1f49a9e916dfdaa81ac0318e85132ccb2cf721619ab7c11fafa5e655bf1d1e903a50ed18c29e637fc2c8045e121fc2a4f77e1501710007e306f7820b7099437f912aade711b34406182bf69fc997bdbb1b80e31337cb6f21032dd170f0da0423dd096bbcdf4736dc08ba06e04201cbd68267f60d81adb365659264c0d71c18366541c022f5a04fef4b640ad8657c8dc037722a5f1887a94f68d57", 0xbd}, {&(0x7f0000001380)="1f68ea344a183262125a1082f0a7f04e1c4b74f873be5649e47380e4f67b83601fe1cebeca17e15e153e5ad30f5f9f14e32674b087e6b49ef6575c6e891a2e4763253274b0cd8bc00807caf6d0d184cfcf7a83bbe538e92f49305481eb", 0x5d}, {&(0x7f0000001400)="ed0ba02006f4e44bf64eb02bf3073cecd5dc13ef67b1577e2c832b7b1dc8134d0cc4eb695c6fcce5ba603d63aa4d2d028dcf85c7e9eb9f06000000a14c26ff399dad96480ed013a55b5e9b90b13e623c12e493613f7449a189e3815bf6fa39376b57f71d379284fdd222aa5e993a16d4dcd0f3ed0384a4c41808df7a01dcba7c29d2efe2fac5ad0ebf0a0250c62f6181a25e8292a2fc2667d74c8ac2a39f7e4e80b397cc2b8e767913258f630a312fa11f", 0xb1}, {&(0x7f00000016c0)="e5486bcde02a00a1b08910420e3eb2dbcb1ead27625d6528a4997256e35d08d1ada3fa1b3178ea9a9c4715589134c5589160c65b915a84c3e59a1ea5e49f532e8890aa5ba41d342975481d310540d265016e0e62adaf60fd7512c2e5dd669a381a3e9cffef956fa8f0", 0x69}, {&(0x7f0000001540)="b5927c29e3e5ac7af37296b72bfd42983815390a9f80ba9e444308662bcb0af539d44a5de0a3cb1842b212d88a6688c39091002f0c8a11a33d0b833e883418f8c8d3d82dffd1e2464c0b908474df4c6c031e276933503e010fcd1c08c4f52ce7bde07601bf90ad8bfc143560bfe3fdb7a7794ad03212d6ad8cef7a7b707e39f6b89c702d7014185ba739cf492c9f38f929316ba6fd5f0a2d6c24576c7a1a3ed0e45c48b925b33dde3aa0b5a010b5aa2cff7764323ba338885eb9b68b74b10b34da49b124d3ddfeff1a262f2a", 0xfffffeca}], 0x7) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4135, 0x1027}], 0x1, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RCLUNK(r4, 0x0, 0x0) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xe4) ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r6, 0x3}) ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f0000001640)={r6, 0x1}) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000041c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') fcntl$getownex(r2, 0x10, &(0x7f0000001680)) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000080)=""/58, 0x0, 0x400, 0x8, 0x1}, 0x20) 09:02:36 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x7a, 0x0) 09:02:36 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) 09:02:36 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x73, 0x0) 09:02:36 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 09:02:37 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r4 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x24, r3, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000001140)={0x8c, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x4c, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x8, 0x4, "0caa00fe"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_SEQ={0xf, 0x4, "d907d76a321fb485fc8013"}, @NL80211_KEY_SEQ={0xb, 0x4, "b307066ccb5463"}]}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "ec50386c01a6533d4df09a3a85b8a068"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ec47bbab1e0a89151912086072"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000001200)={0x4, {{0x2, 0x4e21, @empty}}, {{0x2, 0x4e23, @local}}}, 0x108) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r6, &(0x7f00000017c0), 0x218, 0x0) 09:02:37 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x7b, 0x0) 09:02:37 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x603) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000001240)={@phonet={0x23, 0x7, 0x1, 0x5}, {&(0x7f0000001140)=""/229, 0xe5}, &(0x7f0000000080), 0x1}, 0xa0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r3, &(0x7f00000017c0), 0x0, 0x1ffffffffffffffc) 09:02:37 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x74, 0x0) 09:02:37 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x100, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f0000000040)=""/15, 0xf}, &(0x7f0000000080), 0x42}, 0x20) listen(r0, 0x4000000043) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000680)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="256100000000000000000000000008000500ac1e000108000100", @ANYRES32=0x0, @ANYBLOB="0800020008000000080004"], 0x44}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x10004000}, 0x4000800) shutdown(r3, 0x2) r5 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r5, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:02:37 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x75, 0x0) 09:02:37 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x7c, 0x0) 09:02:37 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000001140)={0x1, 0xa1, "0dc4efe9394d49e80a98aa04df794d019d4bd11e50b7e4cd1c73ce6ff3e5c3d225acc97333921d493ba92ec8cfeed7b7f8c55eaa2ae38f05fba2eb57ce0de4c41453d1cdad7223e7b152cf7ffb6300ccdf8168baae3ffe65bb53367ae54be289e189b924135536193cf739189549c1bf44eb7e71b0257118a31efc92ba7c05e7111e49aea51a50ca513308412c7523488e0b67f16798fa68f9661e1d680abf5eed"}) 09:02:37 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x76, 0x0) 09:02:37 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x7d, 0x0) 09:02:37 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001300)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000001340)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/17, 0x11}, {&(0x7f0000001140)=""/83, 0x53}, {&(0x7f00000011c0)=""/73, 0x49}, {&(0x7f0000001240)=""/160, 0xa0}], 0x4, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RCLUNK(r4, 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001380), &(0x7f00000013c0)=0xc) 09:02:37 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x77, 0x0) 09:02:37 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)=""/204, 0xcc}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000001c0)=""/7, 0x7}], 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x40e, 0x5}, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000000)={0x6, 'team_slave_0\x00', {0x1e6}, 0x8}) preadv(r0, &(0x7f00000017c0), 0x0, 0xfffffffffffffffd) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RCLUNK(r4, 0x0, 0x0) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f0000000640)={0xe5, 0x10, &(0x7f0000000240)}) 09:02:37 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x7e, 0x0) 09:02:37 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x78, 0x0) 09:02:38 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) utimensat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{}, {0x77359400}}, 0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) fchmod(r1, 0x7) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0) 09:02:38 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000000)={0x7f}) 09:02:38 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x82, 0x0) 09:02:38 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x79, 0x0) [ 1035.488895][T12293] qrtr: Invalid version 254 09:02:38 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) read(r1, &(0x7f0000000000)=""/30, 0x1e) [ 1035.519336][T12293] qrtr: Invalid version 254 09:02:38 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) r1 = dup3(0xffffffffffffffff, r0, 0x80000) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r3, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r3, 0x40044145, &(0x7f0000000080)=0xfffff001) connect$netrom(r1, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000140)=0x4) 09:02:38 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x7a, 0x0) 09:02:38 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x83, 0x0) 09:02:38 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) write$char_usb(r2, &(0x7f0000000080)="a02d8b058d5e32fe9bbee52f735c5a2729ce9431684210c590983fa62a7778e8239d1e8d647de811317057769e1d09ab20da58c2b9dcfa533854cef1932c6186ed4bb59e621e86da85016f0c8c83edef1b91347321f1ef0c92", 0x59) [ 1035.759623][T12307] qrtr: Invalid version 254 [ 1035.827883][T12312] qrtr: Invalid version 254 09:02:38 executing program 5: openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x7ffd, 0x101e42) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3e, &(0x7f0000000000)=0x452, 0x4) 09:02:38 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x84, 0x0) 09:02:38 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r1, &(0x7f00000017c0), 0x218, 0x0) 09:02:38 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x7b, 0x0) 09:02:38 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)="fe", 0x1}], 0x1) 09:02:38 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x85, 0x0) 09:02:38 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x7c, 0x0) 09:02:39 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x7d, 0x0) 09:02:39 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="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", 0x1000}], 0x1) 09:02:39 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000000c0)=0x800, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000080)={0x15, 0x7, 0x1, {{0x8, '(\']{({[\xf3'}, 0x6}}, 0x15) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x9, 0x0) 09:02:39 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x86, 0x0) 09:02:39 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000000)=0x3ff) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r3, 0x0, 0x0) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000080)={0x8057, 0x1}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0) [ 1036.656256][T12349] qrtr: Invalid version 102 09:02:39 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x87, 0x0) 09:02:39 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x7e, 0x0) 09:02:39 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x2, 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x4100, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x200c0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001140)={@map=r1, r2, 0x1a, 0x3, r3}, 0x14) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000001200), &(0x7f00000011c0)=0x4e) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0) 09:02:39 executing program 5: openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) fcntl$dupfd(r2, 0x0, r2) ftruncate(r2, 0x3) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) fcntl$dupfd(r0, 0x0, r0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)="fe", 0x1}], 0x1) 09:02:39 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x82, 0x0) 09:02:39 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x88, 0x0) 09:02:39 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:39 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x89, 0x0) 09:02:39 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x83, 0x0) 09:02:39 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) preadv(r1, &(0x7f0000001700)=[{&(0x7f0000001140)=""/138, 0x8a}, {&(0x7f0000001200)=""/157, 0x9d}, {&(0x7f00000012c0)=""/233, 0xe9}, {&(0x7f00000013c0)=""/233, 0xe9}, {&(0x7f00000014c0)=""/117, 0x75}, {&(0x7f0000001540)=""/43, 0x2b}, {&(0x7f0000001580)=""/109, 0x6d}, {&(0x7f0000001600)=""/199, 0xc7}], 0x8, 0x7fffffff) write$P9_RCLUNK(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000000)=[0xf5e3, 0xc3a1], &(0x7f0000001880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x3, 0xbbbbbbbb}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/hci\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000001780)='/dev/vcs#\x00', 0x0, 0x84040) r4 = syz_open_dev$mouse(&(0x7f0000001800)='/dev/input/mouse#\x00', 0x2, 0x200) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000001840)=0xc8070b3d03382bc7, 0x4) write$P9_RLINK(r3, &(0x7f00000017c0)={0x7, 0x47, 0x2}, 0x7) 09:02:39 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/183, 0xb7) creat(&(0x7f0000000000)='./file0\x00', 0x2) 09:02:40 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f0000002800)=[{&(0x7f0000002740)=""/170, 0xaa}], 0x1, 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) preadv(r1, &(0x7f0000002500)=[{&(0x7f0000001140)=""/195, 0xc3}, {&(0x7f0000001240)=""/124, 0x7c}, {&(0x7f00000012c0)=""/230, 0xe6}, {&(0x7f00000000c0)=""/19, 0x13}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f0000002400)=""/255, 0xff}], 0x6, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000025c0)='/dev/null\x00', 0x200000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r6 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x24, r5, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002640)={0x50, r5, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @local}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x4}}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0xffffffffffffffff}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040040}, 0x50) openat$null(0xffffffffffffff9c, &(0x7f0000002580)='/dev/null\x00', 0x8000, 0x0) write$P9_RCLUNK(r2, 0x0, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f0000000080)) 09:02:40 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x8a, 0x0) [ 1037.445009][T12393] qrtr: Invalid version 254 [ 1037.491639][T12393] qrtr: Invalid version 254 09:02:40 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x84, 0x0) 09:02:40 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/ipc\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) 09:02:40 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r3, &(0x7f00000017c0), 0x218, 0x0) 09:02:40 executing program 2: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RCLUNK(r4, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r4, 0x400442c9, &(0x7f0000001140)={0x5, @dev={[], 0x42}}) r5 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r5, 0x0, 0x0) splice(r1, &(0x7f0000000080)=0x1, r5, &(0x7f00000000c0)=0x6, 0x4, 0x2) 09:02:40 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="fef4adc1e5b732110d2a510af7b15166365f18a8d8d81135d4d0d89e47339934df7712a876cbc4a87011f09e11", 0x2d}], 0x1) 09:02:40 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x8b, 0x0) 09:02:40 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x85, 0x0) 09:02:40 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x86, 0x0) 09:02:40 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:40 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x160) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RCLUNK(r4, 0x0, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xe, 0x80010, r4, 0xe0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x17, &(0x7f0000000000)={r6}, 0xc) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000300)={r6, 0x5, 0xd6, "c7f13562155413aeda126e16525c24e0a45890a9f4923f699868df509d987a270fef36fd81b67e843c3b339662ea9846c83563bbe8a6a1e975526f12137c6430e0d7ff828054f25a83351202ecccabcd642d9c0af3ef1ba7687e30010cea7acf1fe713e883aab845c4b40d12dc003aaf072801bde3d0a17b16809e3ab9d1a84752aa221f346b3302aa3a9b52ae5abcfad735d30029533d393ee9fc32949f62b919583f7b8128290da82c0642045319d28be78d9345fff2d4ce8161dfea71f0c13ce8e5a23fcaaca45c00b38e04d2efd1e2a20277174f"}, 0xde) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) 09:02:40 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x8c, 0x0) 09:02:40 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40018, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x81}, 0x0, 0x0, 0x0, 0x7}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r1, &(0x7f00000017c0), 0x218, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r3, 0x0, 0x0) r4 = syz_open_pts(r3, 0x103480) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000000080)) [ 1038.111654][T12427] qrtr: Invalid version 254 [ 1038.200293][T12434] qrtr: Invalid version 254 09:02:40 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x87, 0x0) 09:02:41 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x8d, 0x0) 09:02:41 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:41 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000000100)=""/4116, 0x1014}, {&(0x7f0000001140)=""/235, 0xeb}, {&(0x7f0000000080)=""/87, 0x57}], 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001480)={r1, 0x0, 0xc0, 0x30, &(0x7f0000001280)="277383afcd4865350e910309213bdabbfcd410f3baf36f0ffebf24ab0e4b53a5516e53d2a7114b8d6a900c4c4de6ff0d825dd4d927946fde3e9b05e6f4231aea1b4955344ef40ac91785170e82a4f60a370ae39d0bf2c005f25ecdbbbeacad07de62ace67179957f1a79aac7bc959e8711a4ed87a9538aa5b81bf429e6226a30f4c6e47a03a5cda70ea6af9961207baba03299c893880bf8e178b533c77cdae6b3728a08b87339cab7ecbcdb6585630dafca307c41fbbde370d7ae1ae52d5da4", &(0x7f0000000000)=""/48, 0xdf1, 0x0, 0xe6, 0x2b, &(0x7f0000001340)="99e0b294a20d511a56cac46acf0cedfe26b71783294dc1dfc72bc4f7136923ed6bdeb5bfc142495998cf38ff292d9474a69f4d33fb34e5b251c6b163f5d732a10f6d60a6d3ec7df05e9e204e4da5787900c2a6c795ab1edce68bf6e7560dfadadb657cec58f8dfd643ef0de06709db71cff1ba93da918c8fb638e1b8eaa23d35513f2c4692a890f81887eb7fd941c902a941356849314c3016820f069f0201ae86bc58549442abb744fe45266315bdbac00d7913182a9060a26225af8585a06df6d6f61123726e74b206ec7b9b8e436845f86a43d9e108f682b4890875dd294ac09724e3410c", &(0x7f0000001440)="d476c221ab9b3ddcdd107814c9559ee77f34a7519129f7f7e0ca8b21624b4bbf17675fe2612eb68d93a149"}, 0x40) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0) getpid() 09:02:41 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x88, 0x0) 09:02:41 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000040)=0x2, 0x4) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0) 09:02:41 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x8e, 0x0) 09:02:41 executing program 5: ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$P9_RCLUNK(r0, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req={0x2, 0x5, 0x6, 0x20000}, 0x10) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0xdea00) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x82002) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x599200, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x17, &(0x7f0000000000)={r5}, 0xc) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000080)={r5, 0xee, 0x4, 0x6, 0x3f, 0x100}, &(0x7f0000000100)=0x14) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r6 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r6, 0x0, 0x0) mount$9p_xen(&(0x7f0000000380)='syz\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x2210005, &(0x7f0000000300)=ANY=[@ANYBLOB="747261e20b954dccf4e0ec7d1b4d3f991ef5166e733d78656e2c7e657273696f6e3d3970323030302c63616368653d6c6f6f735f2c716669642d30783030616368653d6d6d61702c736d61636b66737472616e736d7574653d5d2a2b2c7375626a5f726f"]) ioctl$IMGETCOUNT(r6, 0x80044943, &(0x7f0000000000)) writev(r0, &(0x7f00000002c0), 0x0) 09:02:41 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x89, 0x0) 09:02:41 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x8f, 0x0) 09:02:41 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000080)={0x7, 'virt_wifi0\x00', {0x9}, 0xd5d}) 09:02:41 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x8a, 0x0) 09:02:41 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x8b, 0x0) 09:02:41 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x90, 0x0) 09:02:41 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000080)=0x4, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r1, &(0x7f00000017c0), 0x218, 0x0) 09:02:41 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x44}, 0x1, 0xa00000000000000}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000002740)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002700)={&(0x7f0000002800)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r3, @ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x92400791ac6eb0c5}, 0x4000011) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) fcntl$dupfd(r4, 0x0, r4) preadv(r4, &(0x7f0000002540)=[{&(0x7f0000000080)=""/244, 0xf4}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000000000)=""/44, 0x2c}, {&(0x7f0000001180)=""/75, 0x4b}, {&(0x7f0000001200)=""/217, 0xd9}, {&(0x7f0000001300)=""/236, 0xec}, {&(0x7f0000001400)=""/41, 0x29}, {&(0x7f0000001440)=""/76, 0x4c}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/102, 0x66}], 0xa, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') getuid() preadv(r5, &(0x7f00000017c0), 0x218, 0x0) 09:02:41 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x40, &(0x7f0000000080)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x64010101}, @in={0x2, 0x4e25, @private=0xa010101}, @in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x17, &(0x7f0000000000)={r4}, 0xc) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000100)={r4, 0x8, 0xf0, "59b495d9705ecc7092fefb26af55a62333e39ecf9d60360c3c08fb541a0df0c542771c82fe1ae38c93cf4b00417d4a2956814bedc39acceee0ec5166dbfc82f5f2a9c0bdb941f04ae5fdaaee6b1887ed0d99175aaef76c23ca1e7abcb2a533f423b849d5e94e9b85b3be00fdf6ddb1fc78f4e6e1fa3f591ba15d1022ca0cb8e45d1a3ad3b8339796effb4aa9ab7e9c4f2312cbc88d5fb08bd070005fbaf1e877b75d0fa5199beaad014ff27d776492497bceeb22f3d60de0167c7a12fe10f7b327fd79f607b67498a1bb0228acdecb25be548f8c92c39f965fa3bb2ea2ff6c921608ef6134d939689eb4776a282abb53"}, 0xf8) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) writev(r5, &(0x7f0000000000), 0x0) 09:02:41 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x8c, 0x0) 09:02:41 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x91, 0x0) 09:02:41 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) connect$rose(r1, &(0x7f0000000080)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0) 09:02:42 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x8d, 0x0) 09:02:42 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) times(&(0x7f0000000000)) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x20c400, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000040)) 09:02:42 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x92, 0x0) 09:02:42 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x8e, 0x0) 09:02:42 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) getpeername(r1, &(0x7f0000000080)=@x25={0x9, @remote}, &(0x7f0000001140)=0x80) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RCLUNK(r4, 0x0, 0x0) bind$inet(r4, &(0x7f0000001180)={0x2, 0x4e22, @remote}, 0x10) 09:02:42 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x100000000, 0x100000001}, 0x0, 0x41000, 0x7f8, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, r1, 0x1) recvmsg$kcm(r1, &(0x7f0000001640)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001140)=""/254, 0xfe}, {&(0x7f0000001240)=""/243, 0xf3}, {&(0x7f0000001340)=""/226, 0xe2}, {&(0x7f0000001440)=""/94, 0x5e}, {&(0x7f00000014c0)=""/16, 0x10}, {&(0x7f0000001500)=""/180, 0xb4}], 0x6}, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x40) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000016c0)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) getgid() setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001680)={r3, r4}, 0xc) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000001940)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000001780)=0xbd) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r5, &(0x7f00000017c0), 0x218, 0x0) 09:02:42 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x93, 0x0) 09:02:42 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x8f, 0x0) 09:02:42 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='autogroup\x00') preadv(r1, &(0x7f00000017c0), 0x0, 0x7) 09:02:42 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x94, 0x0) [ 1039.953338][T12538] qrtr: Invalid version 254 09:02:42 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x90, 0x0) [ 1040.019485][T12541] qrtr: Invalid version 254 09:02:42 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001600)={0x7c, 0x0, &(0x7f0000001540)=[@register_looper, @clear_death, @enter_looper, @decrefs, @register_looper, @acquire={0x40046305, 0x3}, @exit_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000014c0)={@fda={0x66646185, 0x1, 0x2, 0x3b}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0xa, 0x0, 0x39}}, &(0x7f0000000180)={0x0, 0x20, 0x38}}}, @enter_looper, @register_looper], 0x3c, 0x0, &(0x7f00000015c0)="5f04e106761a4aa3babadc4201ec1d0a2df17c508c2deb6e8f0a91105dba6520f30213be74d8c3adca91afd282ef8ab56727e009ab360039ec992a62"}) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) writev(r3, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) readv(r3, &(0x7f0000001440)=[{&(0x7f0000000000)=""/89, 0x59}, {&(0x7f0000000100)=""/67, 0x43}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f0000000300)=""/150, 0x96}, {&(0x7f00000003c0)=""/80, 0x50}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6) 09:02:42 executing program 2: socket$caif_seqpacket(0x25, 0x5, 0x5) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000080)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41c1, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x64a7, 0x53f3, 0x3, 0x9, 0x7fffffff, 0x0, 0x41}, 0x0, 0xe, 0xffffffffffffffff, 0x9) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0xffffffffffffff80) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x17, &(0x7f0000000000)={r4}, 0xc) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000001200)={r4, 0x9, 0x7ff, 0x3, 0x6, 0x5}, &(0x7f0000001240)=0x14) r5 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f00000011c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)=ANY=[@ANYBLOB="1c0000000714020027bd7000fcdbdf2500"], 0x1c}, 0x1, 0x0, 0x0, 0x8054}, 0x8b3) 09:02:42 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x9}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x420040, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000001140)=@v1={0x0, @aes256, 0x4, "05fce3df1b89e59f"}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) fcntl$dupfd(r3, 0x0, r3) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000001340)=ANY=[@ANYBLOB="00000000000000000122030050b734302700000000000000000000000000000000b8000000edfc886497afc04411b8eba8384bf1055a9a43137d19045504ee9f166414c5d9d583e23cea1a3eb9a275f7dd6036836df190b2f9dca4bb8bcb66c6cdb874504fa374c5bf1ea3fe11b14e6b43c86ceab4263dce09299eb2980bed73807c8182ba81989158fda1fdcbcaf6b2e06fa7b0114ab796c51cf2bf5f991cb2d03a51f61578457e54f7d5c8c013ec2150a44bc2e971b72f38cb323f17447a5b4f28f9bf6c98d4bc2d1c2c6128ff420d676a44530ce197a2dc72e317f121acb9c6f84979d8", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000fec0eb5d09c8489a3a26736ab131ea77b0021daf28f260779952d511a70824a45e7b96d8415c8dbdb0c5656f2ccdaf51277a11cf301a4059f5164fe8d5b405131294e510adc105092273724a1c5d54e40197fb4c2cc28b54baa3ba851bddb8411fb9d5193ead21d0f5d11694ca7760e56000b878f57979fcf666410c9fa600685ae53f04f73ae9cf9a3e0f2e4da9cff3321b1c918b9a319b67632db6846184abc9778b02d7facd998be41d54262b199398c41c29a063f03a"]) preadv(r1, &(0x7f00000017c0), 0x218, 0x0) ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000000080)) 09:02:42 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x95, 0x0) [ 1040.252738][T12555] qrtr: Invalid version 254 09:02:42 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x91, 0x0) 09:02:42 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x619}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r8], 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x619}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000002300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002200)={0xd0, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x21}, 0x40001) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000001140)=""/177, 0xb1}, {&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0) [ 1040.345163][T12555] qrtr: Invalid version 254 09:02:43 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x96, 0x0) 09:02:43 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000002300)="a29a52c385a6", 0x6}], 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, r3) write$P9_RCLUNK(r4, 0x0, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000300)=""/4096) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @rand_addr=0x8}]}, &(0x7f0000000180)=0x10) add_key(&(0x7f0000000240)='syzkaller\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000001300)="fef7aeceb5abd142592cb2d6598ac1ed1c0282c56c1633e1edf93ba90c0efa62519e55715c11c21fc5bc9f7dc8127f7da6c0d9d3b4bb0747955d104ba5ee0826441dc6014f49471703abef00d8323c7f4062bebe6a08bad77fc78e6094aa7241240d385e44d479ca015e8116fa698613ad5b71cb124e287f1a14556f4e7380218793d935f48a638ff1228160be308ee5901fc853eda4bdb9aa082a845410d01b216115cf58d6758e53afd88f27ac78fdc34bb93bdb524964e71ca2f5af7d515896f614aded833204f7ec88958e2f4ef9bd2ad22fdce4c369e4a184d217f6078b9350acadef4d4ed6efe5e080fe7455f68576d99ae7c47a2c41dbb2e9de0a5715ec808795e070a6c771146f49ec2a7987359bc39dd51bd39766d87fc3510696fcd6c48eaebdf6a63dd540cb901776ec494201ff08f69e31bcfa76d1d17f8e3ac285818dfd8c6402163dc9e269f3a17c7139a194ac41a2b2cb3baa556a00a4ea08457756a646c33c758af0bd58c8265d30461b7b5ea6ca74ed0fcd885c2612234624ab53fd074caccb09d2c00809344893586d705dc02708ba4f53ecf838a27c3e9fd060317dc3c3af006d03484f0e40b657dea632d8da2184ef899b9864d967f51c355e47cacd0662fe636573e74908e6304a4e840b7b0cdcc25b1e7a531363ec44d09824191bc235214236764b098a30ee94b4436512c66ba49828030ba12beda669c68390ebaf955c6679e7d00e67a7fbcf5e8bab88d12b865714089866aaf2f3646ce363ab9c3893861b6e54220b22e9fb68a4992fb41d9777b33b4dd3ae6c2a93627ad1342daafa5ea867a7d38c1cb6928404eff3f107b0a2b97e766d4c7a69e76f4a5713e50bf8ed81aff4c291060ac73dc2bd7aa5296fc59aca66c289afce9c8dd76f68ea3aa9af4b506fa690ca06fd7e07b90e9342281a1e66f7115b8db01f6ebfa7073f0c653f53c52b7422bca15e8eca3a379a43778fcd98f3c25065c4903cea0751a523e271a09602eaec15508e007196f34c207654d3b4e7686b9079097f430e6f0bfeff43bbdcaae2f8f30b0c2386c9d6d46c3e4cc68a871c24ac9104640d19dba01a1b7d284faf839eef395fa4a2d6da4f97b1ff5c29642167fe9e107d4b0fde8cc8180eeca338e65f681dc69348c7271581da175932655cae9e7395a858f1e805a40278f8b2b0a3ca33e3042e493e4c606f85ac478772fee8789c3e27647596ba631b20eba5a8eff482162d8544662aaa4be378b1d2b68bbe68ca9976fbb964b77b6a3b55b240520cccb0cea58375a125e4b07a80cadeaa68154b94fb0b6bbb24d00c0a8311077383942e45cbb06259d37bb6bba95469157c6834f705d58e76ad243334e795be50f396813fefe2b57b3fb4f06bcdc7a9263010c0a38b08bd43be56f3375ddce930fbc4fdea67406b17295a51ec3cf37f272097c36b3da1498c86d5da41951599c7d37b8a37363de73a5f90a3b6158d281679ba2497a76f6fdc3c4efb177244726d089748ed9589c61bba4e23368940b69bd3a338b6eaac648a5d37c3108ea53bef8c9c3327d80d6ab853aa3d2a7b0453db90709da988bf35eee1bdd6fe941895d9a6e447facad3ed46c241ba3029830c53e2e8e68210e8f002633dd2ffe606f4c1ada863333e0f2a6e814ff31e76a385eebf3760134877b7a34b1f4259e2289e6ac61fa7d099ebfe5dc3d573c589f97e53edec7b9e9023c44765cc69386b9e16fb1c872f71bac24f34a01deacefe4d5847ffc2330e165e4b9fb6e8643bbb3d6d39f0370e3fab44175185e670119d54ed44bdace36caa0e47aa238f9aa4b16767a1e3c1f6523677d9e4cffd65a8d988d8e92d970bc7223d8f8c5d4201434d1878152cc94825093e62bcfdb3a3cecb5aacddfd81a1c830a3f8d119ba92df133322ae8fdeb05c3db38339f79b83899b15c15f9c1da19734f1e90ad26e27667a2a88f1cac9d0424b5e9a858593bd3228f93afcd844f5c546d9b1790fda50a7d3616a6bbb00ae7acbd81005843e552b314b63a25f213d0b8b30f8301283c7ebd126474f22a23b8e5d86c31813d1cc8ae1542687e3625dcf350e81b9c0dff65f6b32e873d6031900e3f64e6f9249441a0a2129d563e721a66d732606af0b5840803ea06513b090d8928c0070846763e5069ae7d64e3ccb094a17003b2291f1f322a4c771d8ecf1af1d0c681b25da4b43f81b7de40918b8fb27c4ee870903314c3d98d9cb80aed7fbaad8b9ce414dadcf0bf63fa825ec6dd42dc7812013f1ea00abb58aa8a2fb6c08089cba212c6ba6ced2925b42465349eefe8640090ed1dd189f35dd95db2755d7d41b2c489a76253df3a34101acef6177b1bb3bd7d481aa2f779a66429420328a4e0cf46cc73310d9e78afd3d0ff4b698272f626e3c474ee4d06c3bef3f93481519f5e84bdb4fae42ef2402d8bfbf4bc34e9275a5d6ead060a3762dcc6c2a5d27a2225443fa7b0f1fe37785cb5bbc862ae9d3f9b2ad65482b21ffe3d77dc61a5fb597e1a855a229cee3052d5f9c73c3d8504a304c90c7c0450da405adf5f60d64f44974c41196577aeda1f8b55d548a82d3e254cde78e12b6e20f17996b398973be76f88fa4f3d22f9a96dfd88db4bdee5af5786fb7a689690c783030e0332b1819441906078302885499f94754866816165046deb1c60f58363a343e033da67f66d86b0f067379b7a1781e0a2ce6ee781563a88a8b9cba72566bb86ecaf5146bb51478398b774f768a237864c435e9632d46de0e265a12230d09398c1cc050f44caa685909c0d1eaf992cbd80de02a7c070200bbba02b5296d7716cca290019722e818fb39931df85ade73061161f0a300549b641e4a22e3814de340cb09365102fad97df00290797784a243f8bad2a58fadc8f42c1d8efbf52b554f01d702205f1363431d5c51a19a342ce81053c54272760235a308f5c2add514ceb977556d782151e7172ca91dd80ce57a808cdff6e6e57da89afc33526e3afbf3891e8c4f7a5a66fcd71b8b8f03f34e7e6cab3d763019803c98f977252c1c0ad233463586237f6c6cb9fc0a0874b31e3d56bc39cd44545f741338c0b74f7a439fb903e29850ce32ead7386bc5689514de5a38c9413337358b2a7578fa2b14cc1a5f313ef1ffe8680b79cd28e5b6684c80e065ae4f7a8cb3772be7d9711fd727a7ff63b8ff98344b9a31df40a9ccaf78c3bc0407b3535dc0ec7ce3c39492c020082743ec3eb0f5c063972f230a6d7e8bf23482a25e81656816c53fe661e6b274e2d641d0ec9a78f9a344da5f7d1ff703150f4d9b51b3d5b9392eeebdf418c80198136e7a6864c7bafdb0b228d83932a16f8b3fa13f4071d3fe4c5f57cb1cbbe362419bec958ec88dd34bc4cb17589b9997664cf7dc9aaba7f6c39861993409a144757a1032c0a4dd92d2ef7464c625d16726bec80868774c53fbcbb3ec188b4d8a77e02ff8443de30467e5685a4e2f53d15376f23c8ec83ee99061a1773e98c5f4128651e2864c3d3c0f2cfecc93255c21a1c747554245c719d189265f1feaa74fbe86e51427e59cbaeba49f7ae93ee2548eeedbcd6341bed637ec519614851d43b8d06fbdc7cb974b64cc5a4db80b25e53e10a61a848e03e7bda9523114a70aa7b38576ee08eabe72d79629e0f3b28a82c300bdd8ef9a33b3a6fa04cdf536c4a5a510e4bd39ccd0f2cc4be617d38cce12fa03117bbd002cd848d396a9261d726c78c291a4391aefc300ddd9ce50bffedc1d14407b4357bcb9f0d9bfc042aeeb9b6f696d57f0fdefc552143afbcd61f1b2973bbc83a8c3da819ac8b2213adbf38ade7b2b412ab95e6480a5e98bf8fd05ce1757d716ddc1e57e019b38d6954922dcefe0c66c96f4c416041bf1a56b8d1732a050fd81fc0788d53687522ae99df79067d64d6ad4aeb28015dc919a133e28fe0cf7532a69875ab0f2ac5ceff52cdd9b5870872c9c952b960ea2b1ba2c2964777b8212a2f4fc57c1c1dcc78561842684167c02a503ec9a7cb5e68e09996027eb0d61d5f17bbb61ea5ab00749b81a598ae57b00560c3a356593e6a3d07c6ef980a9adc4381bfab84dd68fdf79d7f495f556e641c1707d63c3086cdd0327b210a7ef1b201209a130b402e73ebf81c5a1d41dee00dbf43dfa01945057dfb845c3fbe80bba212caa361db30f0952c3cefa052012a4204b63c08a34c3a0ec53dc4a7fca7fba6cb2fdb7abc4d7700647dc60476903ed66de6b943043ccb391722ee18929e6bd60183eeb88ae66b426af0cd18dacb082bd26da995bc5aaec1850ba051d4e30dfb6e22102ad4cc8c8aa2561c99fde3bef97674c8bc2965a07aa1f48fe30124aac15f5db7fbbf7b01aef53f11d76fecc6598ef323967eebfa95aabbea5c74c5ed244ebca056b06db45aef340afe571f375fcd717754d8ff92bf1879a6ee778c1496397ca106c51e47db85699b2b250186a8b04b2451c1930dd9784fdd9d305fd01c6507365216d5b9df1ab3259c32d650928fcc814084b2cc832720c4764d5dbc7ef7627f0a1fb981d4c157cea680ccdc8f4edfd9c02689926dcdf91e1f408318d6120773c095eca6cc709c648c3415b23f486a1c1b8889ea6c1c546b97d5baa7f31bd9b25840a038df53f5ec951f3963dad5d07033d9ce8618287a1be69c868342b80005c342377cb27f34445e49979710a6f408582523554c1a72b2fe0f7b651cd594ccb8c5dce319cf44224ed11d8b7420ab9f184d7e856857c6b24bdc6fb4d629f770870ef40ea92f8a24e0d9e9ac8a6f29d4b1b48977659ed1b3ebcddc51dde8331c868f9ebe9211e6535c757ffeee6f9c3611f0f039fa9e1ba112d3563bb5f885b7406f9e0b63f1cab81f05007a204b3eaf01b07fb643651d21d6724025785e45eb26eb85375804ccb962de0d532d32aac8d83889e699abb0ffd9316d005e4eea64a73924712fed0748738db4af3fddf843b44753bce9379196d38de616e2d96b756c4a0c75e2886671bd66c5c85736eb89cbad561e2453b025ab25cadb86a589424b74da63b245181a6de7b6d897f8e418b90f7c4631e033ec3106353e6240827ec4a5ac33b9b9e077299e4e41d3039ed7d0f581060a4cbd5cc4dd4ce38cf81f542a0ea8c0f05914ef8d06e49b9743d39d3cd1adc593a4dfebf9d3d7e50aac8f54b97e311429bbab7ba1df7cd5d842b0ff35ec3009608691c9647110315e3c2787f58d029f2f39bfe3110fa9bfbaa91c2c362c5a23b61fdc272ce4e224c8ecfb956f6f64daa577601b88e5a9aff2e9d5aac4168e444fd1bbbb20fef2a39ca9e3a19de680656bf346dc24eac805c099633c364a36fdf97fbaa488c35dc11437144a5a89f122d79c6d3dc9a9ee88a6bf5aabfa1f169f9d034cdcbf0b2334cfc9a5f5a9753f3aef8c1256b667f24a2a667f5968c5073831ab63376af1008ceaaf7ca4ae95a648c6ce44c01056c87486dc5cae074e8018400e15785ce436315dacb5f728712e5069f039427bfe4127c96d68533df884c0f96a650b7c139a3743a74996ef745e5034d7e92e25817af88c0eb4e779dcc38d2e9c6e997b2d4499bb6d1f79b502df59d8a4a8e0aa720c846209db3fc574126ae6f5ebfbcf80c48fd9b229932b3a3af3434034ccf116917c93e2b1ad49e8e6ca69872b5bd96547779825f65c2a62d510562625082090fdd10328dff5a28e108b0387a459af7b168dfe5650b39bc455aaefb437d9b9894d7e1c42e625fada403487f4ce33a009df56d6ecaa81978f466ea469bcbfbacc6e50776a827e3e236bc8d6907bfb9813685", 0x1000, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x17, &(0x7f0000000000)={r7}, 0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000000)={r7, @in6={{0xa, 0x4e22, 0x3, @private1, 0x800}}, 0x9, 0x6, 0x5, 0x4, 0x63}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={r8, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f0000000200)=0x10) 09:02:43 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) dup2(r0, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r1, &(0x7f00000017c0), 0x218, 0x0) 09:02:43 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x92, 0x0) 09:02:43 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x97, 0x0) 09:02:43 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:43 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000080)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0) 09:02:43 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x98, 0x0) 09:02:43 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x93, 0x0) 09:02:43 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x206000, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="0601000004d5600001000500c5000400"], 0x10) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) 09:02:43 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x99, 0x0) [ 1040.998273][T12604] qrtr: Invalid version 254 09:02:43 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x94, 0x0) 09:02:43 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RCLUNK(r4, 0x0, 0x0) move_mount(r2, &(0x7f0000000080)='./file0\x00', r4, &(0x7f00000000c0)='./file0\x00', 0x11) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:43 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x9a, 0x0) 09:02:43 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x95, 0x0) 09:02:43 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r1, @ANYBLOB]) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = getpgid(r2) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x40) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xee01, 0x0, r1, 0x127, 0xfff}, 0x7ff, 0x1, 0x3, 0x1, r3, r4, 0x6}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r5, &(0x7f00000017c0), 0x218, 0x0) 09:02:43 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1c9c03) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000580)="a87a694c8893146bb9adbd1ea0ca5d6413cd5510dfe8137bd7e0c677ecb0ec4e5bb3e12355af107acf47038552b4c24ca3e080b83f9d57fd0bd276395ec7f7d69048f48bcebe3c659ca3bf60d5669667d4e597862c82d799cbd14951aa2e8f7861931b277dcdc7fe00818b9757fcff9945e5c74f9427079c97e12b7522a9a9814b86af940f8477678d9be8e02a8cbd2efe8e6ddf472e39140c80af95d7f8892f264d93d8102a5f91aa18cb49a3c30e25c8e0dabaa4fd31e3f4c89ccc70cb940c4434515954f697d3f2c04f61e725a9bd94f3405da088af6e8ad50a4f88e71debf26f96a121e4aa50cb12c2f5cdeb1abcf0951717480d059b", 0xf8}, {&(0x7f0000000380)="91e272f161cba1af4a825a161a91accaf689a83351c4739ff181165595289cf85185d7bd13b72a5d58e5b7bb76cb04e1896a30dd25230e3875d0fcb0c70618ffbec2179f2b555899ba5776a533c169394a7b053b15b2c4"}, {&(0x7f0000000b00)="997edabd5345471e2a4aa6523e83dd8f73b8d51956649ccdefcb84579b2548783db19655873ad1896d69b68d874f7a2c39ea8ba831ac5c281e8ba53ca16e5ef13495922d5da88c67c2bd103fb42657d61e3153c030a50b0d76fe752adfa69f8e8ae9f23c47e01f4a988dff96534c08fc33eace49be76668d5b8c77ef24d16a6c680e1968b27a6e847e2673cc144f4bc1095ba8e576a76907aac84f6863b22a4f7d019462859872bed7f00de91842360902a2522f5d24f5d6745e71eea0acb2e7c3e9bd559ef8b28726658ed9208e626ade2eb131c685eb3af764b94c33da2445", 0x77}], 0x3, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0xa, 0x4e24, 0x2, @ipv4}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x187}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, &(0x7f00000002c0)) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x1, 0x0, 0x1003, 0x0, 0x0, 0xfff, 0xfffffffe}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0xfbfffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000940)=ANY=[@ANYBLOB="600100000000000003000002000000001d65c4d90124f5d6000000350000000000000036f900000000000102000000000000000000000000000000000200000000000000000000000000000100010000000000170400000000000008000000000000000000000008000000090000000101000007000000360000000000000000000000001b0e2646673eca3e5c2d75000000000000a53d55d371f0c75367351236f174840a63e32ebf5ccc5f54178cb8bfa337217f65e3bd", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a6b20000050000db73635d00000000000400000000000000ff20000000000000b500000006000000a59d58cd2bc8db31a6e19b87f66c5fffca91aae53a7212b0fb7c8281c61e25a35f7017326b4dc6a667b17cbf8affb1608733c84894578bbe6e031fca984613b897854dd73e5792375a90bd915879ff67a60d7b516042e488f1e59888da2a2bc6f0b89f59f645237afba2e34a86560e9dd05a20874f51d1527174a5d4ca08131c8377c13793e14874fa8e1c759abcbd210361164ac03ef718481e978a03b1f9535c5a70823c2021ba32baceac21241cf905ba30d2e08daed4e094f396ba2e8fc0da8169b4"], 0x160) gettid() sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36d) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x400200, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x12000000, &(0x7f0000000140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) 09:02:43 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x9b, 0x0) 09:02:44 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) 09:02:44 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x96, 0x0) 09:02:44 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = signalfd4(r0, &(0x7f0000000080)={[0x4597c452]}, 0x8, 0x180800) preadv(r1, &(0x7f00000024c0)=[{&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/127, 0x7f}, {&(0x7f00000000c0)=""/6, 0x6}, {&(0x7f00000021c0)=""/186, 0xba}, {&(0x7f0000002580)=""/65, 0x41}, {&(0x7f00000022c0)=""/232, 0xe8}, {&(0x7f0000002400)=""/176, 0xb0}], 0x7, 0x7) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RCLUNK(r4, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r5, 0x40044591, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) write$P9_RCLUNK(r6, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000002540)) [ 1041.462592][T12624] ntfs: (device loop3): parse_options(): Invalid gid option argument: 0x00000000ffffffff [ 1041.624473][T12639] qrtr: Invalid version 254 09:02:44 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r3, 0x0, 0x0) write$P9_RWALK(r3, &(0x7f0000000080)={0x57, 0x6f, 0x1, {0x6, [{0x40, 0x4, 0x4}, {0x10, 0x4, 0x2}, {0x0, 0x4, 0x1}, {0x0, 0x0, 0x2}, {0x4, 0x2, 0x6}, {0x1, 0x4, 0x6}]}}, 0x57) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r4, &(0x7f00000017c0), 0x218, 0x0) 09:02:44 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x9c, 0x0) [ 1041.700795][T12639] qrtr: Invalid version 254 09:02:44 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x97, 0x0) 09:02:44 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r1, 0xab05) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0x8, 0x8}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x2, 0x200, 0xfffffff8, 0x8, 0x0, [{0x7, 0xa3, 0x5, [], 0x1}, {0xb5, 0x80, 0x81, [], 0x9f}, {0x4, 0x7f, 0x80, [], 0x1}, {0x0, 0x0, 0x0, [], 0x4}, {0x7b, 0x9, 0x7, [], 0xff}, {0x3f, 0x1, 0x8, [], 0xf2}, {0x5, 0x80, 0x65, [], 0x7}, {0x7d, 0x0, 0x2, [], 0x6}, {0x8, 0xff, 0x3, [], 0x3f}, {0xd7, 0x9, 0xdc, [], 0xff}, {0x80, 0x2, 0x5, [], 0x20}, {0x2, 0x1, 0x4, [], 0x4}, {0x3f, 0x3, 0x1f, [], 0x1}, {0x7f, 0x1, 0x7, [], 0x1}, {0xd7, 0x5, 0x0, [], 0x20}, {0x1, 0x5, 0x8, [], 0x1}, {0x1f, 0xe7, 0x4, [], 0xf9}, {0x8f, 0xff, 0x0, [], 0x7}, {0x4, 0x9, 0x0, [], 0xbf}, {0x1, 0x2, 0x80}, {0x4, 0x44, 0x20, [], 0x80}, {0x80, 0xff, 0x8, [], 0x80}, {0x80, 0x3, 0x3, [], 0x80}, {0x81, 0x43, 0x91, [], 0xf4}]}}) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$P9_RCLUNK(r5, 0x0, 0x0) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x58, 0x2, 0x80, "6851809764ee073630d2c89468739cc8", "f257185e21a290c5dcf86ffb0cca0e63800ec3fae094ab17e22b4a3f3231b7ec977e24453902097782cb390263ec4cec37f08b5f1bbc3321b3b2f0eae1fb2aa4ae7e79"}, 0x58, 0x0) writev(r2, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) 09:02:44 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x9d, 0x0) 09:02:44 executing program 2: prctl$PR_GET_TSC(0x19, &(0x7f0000000080)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f00000000c0)={0x94, 0x175}) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RCLUNK(r4, 0x0, 0x0) ioctl$TIOCSIG(r4, 0x40045436, 0x1d) [ 1041.934482][T12654] qrtr: Invalid version 254 09:02:44 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x98, 0x0) [ 1042.041151][T12661] qrtr: Invalid version 254 09:02:44 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x99, 0x0) 09:02:44 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x9e, 0x0) 09:02:44 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001340)='/proc/self/net/pfkey\x00', 0x200002, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000001380), &(0x7f00000013c0)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) write$fb(r2, &(0x7f0000001200)="f501d62819665e1bd6cd54d80360446e3ee0abf59f7a415fa8330cb01dd78ebab49624a495e78033714791e0cf3a2dcefd1fe7e4e2f20a82d23968cf289a7e26e4d4b898a21966b1c28314e6fae18bf8e7130b91efe30b1fcb9b7318328db05194a6e20c12cee3a785009b289c294a102fd6695c0b0c1f5d80e5fba65c014511b67b347fe346a337598c6ee4c0", 0x8d) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r3, &(0x7f00000017c0), 0x218, 0x0) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000001140)={0x9, 0x9, [{0x1, 0x0, 0x3}, {0xf0, 0x0, 0x8}, {0xffffa720, 0x0, 0x8001}, {0xffffffe1, 0x0, 0x361}, {0x3, 0x0, 0x80a}, {0x1bee, 0x0, 0xf3cb}, {0x8000}, {0x4eda, 0x0, 0x8001}, {0x0, 0x0, 0xffff}]}) 09:02:44 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x204881) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) move_pages(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x2) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/vlan/vlan0\x00') openat$cgroup_ro(r2, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) 09:02:44 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) r3 = openat2(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x88940, 0x8, 0x2f}, 0x18) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$P9_RCLUNK(r5, 0x0, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xfffffffffffff801, 0x202000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000080)=[0x1, 0x3f, 0x5, 0x5, 0xffffffff, 0x6, 0x8000], 0x7, 0x800}) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) 09:02:44 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x9a, 0x0) 09:02:44 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x9f, 0x0) [ 1042.367541][T12680] qrtr: Invalid version 254 09:02:45 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x7fff, 0x181401) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) fcntl$dupfd(r2, 0x0, r2) dup(r2) r3 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r3, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r3, 0xb703, 0x0) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000001140)=@known='trusted.overlay.redirect\x00') 09:02:45 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x9b, 0x0) 09:02:45 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) read$qrtrtun(r0, &(0x7f0000000000)=""/147, 0x93) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) 09:02:45 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xa0, 0x0) 09:02:45 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x9, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/timer\x00', 0x22c03) r5 = fcntl$dupfd(r3, 0x406, r4) write$P9_RCLUNK(r5, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000001180)={0xf1, [0xffff, 0x4], 0x800}, 0x10) write$P9_RCLUNK(r2, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x44, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x44}, 0x1, 0xa00000000000000}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000001140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) 09:02:45 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x9c, 0x0) [ 1042.679930][T12699] qrtr: Invalid version 254 [ 1042.723760][T12703] qrtr: Invalid version 254 09:02:45 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000a40)=ANY=[@ANYBLOB="6a19119ba4295bc2b02a0b00dc73b8fe70da3f", @ANYRES16, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB="0061a9002200f4f071e690521d79ec2df20a1921292b81a9ff0700001853f6caa7bee88f97c39fa1a81e3bdd3b2a22728650938e7081aa8a", @ANYRES16, @ANYBLOB="00032dbd7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x2044011) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="b00100ff", @ANYRES16, @ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4241}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="a4010000", @ANYRES16, @ANYBLOB="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"], 0x1a4}, 0x1, 0x0, 0x0, 0x24044040}, 0x6004) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000c674ad4f8cf84155cbf7a11cbec15b1ddccbf3f0ef01672520d8936516e364f8", @ANYRES16, @ANYBLOB="01002cbd7000fcdbdf25020000002800088024000780080006003300000008000500320e107908000600dc000000080005009b1219360800010000000000"], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000bc0)={0x130, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xcc, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6993}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22e3ba41}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7ed0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11e1b413}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13333b93}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xfdf3ce5}]}, {0x4}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5d77}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d122c64}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x148c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c86cd8d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e9596fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfde}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfeda}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5521c5e5}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24ef7905}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d687e8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x270d71de}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa3dd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeec3}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd91657d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51af5404}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x354a7d67}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x400000d3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x20, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe94e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa7b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd8830e2}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="020027bd7002fbdbdf25020000006c000c800c000b8008000a00012f000014000b8008000a00cd1300000800090008fe303b69cbd191ef00090092c3c6730800090045443c3805000900d44dcc1d08000a00d5ea000008000900bd91f74b1c000bdeb3958008000a000e56000008000a0091f300000800090082a87d560c0004800500030002000000"], 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="65020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x274}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:02:45 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xa1, 0x0) 09:02:45 executing program 5: openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) 09:02:45 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:45 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x41c1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, [], 0x1}, 0x800}, {0xa, 0x4e20, 0x404, @local, 0xffff}, 0x4, [0x200, 0x6, 0x2000000, 0xffffffff, 0x7f, 0x0, 0x7fffffff, 0x7]}, 0x5c) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) fcntl$dupfd(r2, 0x0, r2) fsetxattr$security_ima(r2, &(0x7f0000000000)='security.ima\x00', &(0x7f0000001140)=@md5={0x1, "cb0e9cae3297636252e86e206b2c45fc"}, 0x11, 0x1) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 09:02:45 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x9d, 0x0) 09:02:45 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xa2, 0x0) 09:02:45 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) sendto$l2tp(0xffffffffffffffff, &(0x7f00000000c0)="ca56ebe98d90b048419f656f7f3298d6783980a1e4e470881309c3b9d92c60f64ebccbb0d3d194f5de00fde5709865", 0x2f, 0x0, &(0x7f0000001140)={0x2, 0x0, @multicast2}, 0x10) fcntl$lock(r0, 0x3, &(0x7f0000000080)={0x2, 0x3, 0x7f, 0x9ed6, r1}) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0) 09:02:45 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x9e, 0x0) 09:02:45 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xa3, 0x0) 09:02:46 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x4, 0x0, 0x0, 0x0, 0x5}, 0x9c) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) creat(&(0x7f0000000040)='./file0\x00', 0x1) r5 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r5, 0x40044591, 0x0) ioctl$EVIOCREVOKE(r5, 0x40044591, 0x0) r6 = fcntl$dupfd(r4, 0x0, r4) write$P9_RCLUNK(r6, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r6, 0xc0a85320, &(0x7f0000000200)={{0x58, 0xfe}, 'port1\x00', 0xc3, 0x6000c, 0x1, 0x3, 0x4, 0x2, 0x3, 0x0, 0x2, 0xfc}) 09:02:46 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x9f, 0x0) 09:02:46 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000001280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001240)={&(0x7f0000001140)={0xcc, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xfffffffd}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x80000000}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x240000c1) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x42884, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0) 09:02:46 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xa4, 0x0) 09:02:46 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x44, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x44}, 0x1, 0xa00000000000000}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x94, r4, 0xa00, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30, 0x3d}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000000}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x50009}, 0x40000) 09:02:46 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xa0, 0x0) 09:02:46 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000200006aaaa51ce1a3acae0de7b550d93a16172d1b5bb07599a378bcc6e0665a451bb2f4271f70f6bf84064afb708bb67cb956774f078d1bbc46b18a6c392674efcc7910d3f4cb0d29ac638b0218dee58182aa33e550b8dd7078"], 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001540)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="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"], 0x2e8}, 0x1, 0x0, 0x0, 0x4004804}, 0x4000010) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r3, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xfffffd74, &(0x7f00000002c0)}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x17, &(0x7f0000000000)={r6}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001280)={&(0x7f0000001180)={0xd0, 0x1, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1ff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x4ac}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x300}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0xa1f}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x70e6}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x99}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x9e}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0xffffffff}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f7}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000010}, 0xc040) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000001340)={'syzkaller0\x00', 0xa8}) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={r6, 0xfffeffff, 0x8, 0x9}, 0x10) [ 1043.744019][T12766] qrtr: Invalid version 254 09:02:46 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) perf_event_open(&(0x7f0000001140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$P9_RCLUNK(r2, 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000001200)=0x9569) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$P9_RCLUNK(r5, 0x0, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r5, 0x5411, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$input_event(r1, &(0x7f00000011c0)={{r6, r7/1000+60000}, 0x14, 0x7fff}, 0x18) preadv(r3, &(0x7f00000017c0), 0x218, 0x0) 09:02:46 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xa5, 0x0) [ 1043.841222][T12766] qrtr: Invalid version 254 09:02:46 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xa1, 0x0) 09:02:46 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x630483) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$P9_RCLUNK(r5, 0x0, 0x0) r6 = accept$inet6(r5, 0x0, &(0x7f0000000040)) shmget(0x2, 0x1000, 0x800, &(0x7f0000541000/0x1000)=nil) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/meminfo\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x12) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="6e610000000000000400000000000000000000000300"/76], 0x58) 09:02:46 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0xff}, 0x8) 09:02:46 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xa2, 0x0) 09:02:46 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000012c0)=0x7d, 0x4) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RCLUNK(r4, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r5, 0x40044591, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) write$P9_RCLUNK(r6, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="6a008d249722d03ff63044379677e66071f8265b32e65024d4c8684ae7259e223ae2359ddb48057a7cd9e1bea6ec79a1f861daabd1f370d5480c5f96f192c2fefb6f490a1ada2abb1c47b8816abb521428e6dc82ec16192a6cbf13a3c409dadc737f00"/110], &(0x7f0000001140)=0x72) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000001180)={r7, 0x7f, 0xfffe, 0x0, 0x0, 0x5}, &(0x7f00000011c0)=0x14) preadv(r2, &(0x7f00000017c0), 0x0, 0x46) fcntl$getown(r4, 0x9) syz_open_dev$vivid(&(0x7f0000001200)='/dev/video#\x00', 0x2, 0x2) [ 1044.067791][T12785] qrtr: Invalid version 254 09:02:46 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xa6, 0x0) [ 1044.151974][T12785] qrtr: Invalid version 254 09:02:46 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x17, &(0x7f0000000000)={r4}, 0xc) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000080)={r4, 0x3e, "495deeacec3201c8ebe8cba7df1b3087f9d18db1af42c6d883d5fc009b5196e52d97803cf8423446c200d115b1a5f6b327270ae27cf043cbb5669e63ef45"}, &(0x7f0000001140)=0x46) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r5, &(0x7f00000017c0), 0x218, 0x0) 09:02:46 executing program 5: openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000180)="fe", 0x1}], 0x1) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r3, 0x0, 0x0) sendmsg$NFT_MSG_GETGEN(r3, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x20008040) 09:02:46 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xa3, 0x0) 09:02:47 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$P9_RCLUNK(r1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000540)={'bond_slave_0\x00', {0x2, 0x4e20, @empty}}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) r3 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000200), 0x2) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, r6, 0x7, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x202}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="0c030000", @ANYRES16=r6, @ANYBLOB="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"], 0x30c}}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:02:47 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xa7, 0x0) 09:02:47 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xa4, 0x0) 09:02:47 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000001180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f00000000c0)={0x18, 0x1406, 0x10, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x8000) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x15, r3, 0x0, 0x0) keyctl$revoke(0x3, r3) r4 = add_key(&(0x7f00000011c0)='asymmetric\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)="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", 0x1000, r3) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000002240)={r4, 0x48, 0x1d}, &(0x7f0000002280)={'enc=', 'oaep', ' hash=', {'sha224-ce\x00'}}, &(0x7f0000002300)="5c15f47ae1107bc892d4114331a76e942cbe08c74cb13163bb71c4b4d0f23b5ee3b1a82cfa51f915c2a1e1fb68a97b909dd5d6d3b1cbcd6c97690b4528f4d3009a8d23774563d325", &(0x7f0000002380)=""/29) 09:02:47 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='task\x00') ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000001140)={{0x1, 0x3, 0x4, 0x1, 0x3}, 0x0, 0x6}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0) 09:02:47 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xa8, 0x0) 09:02:47 executing program 5: syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x12000) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r3, 0x0, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000100)={0x8000, 0x0, 0xc, "d5b25b7857229d4c7c1b6dea5f7870db02129fd92daf1bc95754194e0086aa29844983312788f656e5a4c14c6ac03d32b74abf92e6430ea9b5f83625", 0x23, "14a92f4f0a7c3324f27427b06fe2f981a42a90cdf5ee2ec61493fe7a2bd9f18f6c8a390ac2cb7f0cc34a3b1cf959b44b98e7ed2d677ca4093cd23fdd", 0x80}) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r4, 0x40044591, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$P9_RCLUNK(r5, 0x0, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) write$P9_RCLUNK(r7, 0x0, 0x0) ioctl$TUNGETDEVNETNS(r7, 0x54e3, 0x0) fanotify_init(0x4, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) 09:02:47 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xa5, 0x0) 09:02:47 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) shutdown(r2, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f00005e0000/0x1000)=nil, 0x1000, 0x2, 0x30, r4, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) [ 1044.938590][T12831] qrtr: Invalid version 254 09:02:47 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000001180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001140)={&(0x7f00000000c0)={0x18, 0x1406, 0x10, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x8000) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x15, r3, 0x0, 0x0) keyctl$revoke(0x3, r3) r4 = add_key(&(0x7f00000011c0)='asymmetric\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)="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", 0x1000, r3) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000002240)={r4, 0x48, 0x1d}, &(0x7f0000002280)={'enc=', 'oaep', ' hash=', {'sha224-ce\x00'}}, &(0x7f0000002300)="5c15f47ae1107bc892d4114331a76e942cbe08c74cb13163bb71c4b4d0f23b5ee3b1a82cfa51f915c2a1e1fb68a97b909dd5d6d3b1cbcd6c97690b4528f4d3009a8d23774563d325", &(0x7f0000002380)=""/29) 09:02:47 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x101000, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$P9_RCLUNK(r1, 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000001300)='tasks\x00', 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000001140)=0x8, 0x8) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r3, 0x0, 0x0) ioctl$CAPI_SET_FLAGS(r3, 0x80044324, &(0x7f0000000080)) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000001180)='/dev/input/mice\x00', 0x80001) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001200)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="040026bd7000fddbdf2502000000080003000180ffff05000668000000090000000100"/46], 0x34}, 0x1, 0x0, 0x0, 0x80080}, 0x4040880) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41c1, 0x5338, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') ioctl$FITHAW(r6, 0xc0045878) preadv(r6, &(0x7f00000017c0), 0x218, 0x0) 09:02:47 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xa9, 0x0) 09:02:47 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xa6, 0x0) [ 1045.134632][T12842] qrtr: Invalid version 254 09:02:48 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) write$char_usb(r2, &(0x7f0000000080)="a02d8b058d5e32fe9bbee52f735c5a2729ce9431684210c590983fa62a7778e8239d1e8d647de811317057769e1d09ab20da58c2b9dcfa533854cef1932c6186ed4bb59e621e86da85016f0c8c83edef1b91347321f1ef0c92", 0x59) 09:02:48 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qrtr-tun\x00', 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) 09:02:48 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xaa, 0x0) 09:02:48 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xa7, 0x0) 09:02:48 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000001140)={{0x5, 0x2}, {0x1, 0x5}, 0x2, 0x3, 0x40}) 09:02:48 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xab, 0x0) 09:02:48 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/xfrm_stat\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RCLUNK(r4, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r5, 0x40044591, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) write$P9_RCLUNK(r6, 0x0, 0x0) r7 = pidfd_getfd(0xffffffffffffffff, r6, 0x0) ioctl$VHOST_GET_FEATURES(r7, 0x8008af00, &(0x7f0000001140)) getsockname$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000000)=0x8, 0x4) 09:02:48 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xac, 0x0) 09:02:48 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xa8, 0x0) 09:02:48 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000001200)={0x3, 0x47, "5858ab25634b7c9b3ccfde573582c8328712845df6215162d11477ca8abfedd23dc0d2d91d5437537aa828fbc25e781b06fafc891d8da3733df90cf3c2a24cc8e1652d267f6924"}) r2 = openat2(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x109002, 0xd, 0x1c}, 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000001140)={0x401, 0x667c, 0x0, 'queue1\x00', 0x9}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x218, 0x0) 09:02:48 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RCLUNK(r3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000040)={0x1, 0x200, 0x4, 0xf0}, 0x8) socket$inet6(0xa, 0x2, 0x3e) shutdown(r1, 0x2) r4 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r4, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) 09:02:49 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x6, 0x5, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x3, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r2, &(0x7f00000017c0), 0x218, 0x0) 09:02:49 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xad, 0x0) 09:02:49 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xa9, 0x0) 09:02:49 executing program 3: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/xfrm_stat\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RCLUNK(r4, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r5, 0x40044591, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) write$P9_RCLUNK(r6, 0x0, 0x0) r7 = pidfd_getfd(0xffffffffffffffff, r6, 0x0) ioctl$VHOST_GET_FEATURES(r7, 0x8008af00, &(0x7f0000001140)) getsockname$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000000)=0x8, 0x4) 09:02:49 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xaa, 0x0) 09:02:49 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x619}]}, 0x34}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x619}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r8, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r8], 0x38}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x619}]}, 0x34}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000002c80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002c40)={&(0x7f0000001ec0)={0xd74, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xb39}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}]}}, {{0x8}, {0x274, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x800}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x2c, 0x4, [{0x1, 0x8, 0x40, 0xe7}, {0x1f, 0x1, 0xe5, 0x6}, {0x4, 0x2, 0x7f, 0x492}, {0x3, 0x1, 0x9, 0x3}, {0x4c69, 0x0, 0x5, 0xfa}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x400}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x27c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xce}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x2c, 0x4, [{0xdacf, 0x7, 0x0, 0x6}, {0x8001, 0x76, 0x3, 0x1}, {0x9, 0x40, 0x2, 0x1f}, {0x1, 0x4, 0x1, 0xffffc252}, {0x8, 0x7, 0x5, 0x8001}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x150, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x5, 0x0, 0x0, 0x7}, {0x8001, 0x5, 0x20, 0x10000}, {0x3f, 0x7, 0x4, 0x80000001}, {0xd0, 0x4, 0x5, 0x4}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xa0e}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xfffffffe}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xf1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}}]}}]}, 0xd74}}, 0x6000090) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="fe", 0x8}], 0x1) r9 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x84002, 0x0) ioctl$SIOCAX25CTLCON(r9, 0x89e8, &(0x7f0000000040)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x9, 0x1ff, 0x2, [@null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 09:02:49 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f0000001140)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x468}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000080)) preadv(r1, &(0x7f00000017c0), 0x218, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x109402, 0x0) 09:02:49 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xae, 0x0) 09:02:49 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) [ 1046.873855][T12912] qrtr: Invalid version 254 09:02:49 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xab, 0x0) [ 1046.951899][T12912] qrtr: Invalid version 254 09:02:49 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xaf, 0x0) 09:02:49 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qrtr-tun\x00', 0x1) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$P9_RCLUNK(r1, 0x0, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r1, 0x1, 0x0, 0x1000}) writev(r0, &(0x7f00000002c0), 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) fcntl$dupfd(r3, 0x0, r3) r4 = fcntl$dupfd(r0, 0x0, r3) write$P9_RCLUNK(r4, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000080)=0x1e) 09:02:49 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RCLUNK(r2, 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000001380)={0xffc00000, 0x2, 0x1, {0x1, @win={{0x3, 0x1ff, 0x1000, 0x7ff}, 0x2, 0x284af6c4, &(0x7f00000012c0)={{0x40, 0x2, 0x9, 0x1f}, &(0x7f0000001180)={{0x1000, 0x80, 0xfffffffb, 0x14e59f6c}, &(0x7f0000001140)={{0x8000, 0x1ff, 0x8, 0x3fff800}}}}, 0x6, &(0x7f0000001300)="5c8206195ed43a4d093e0e224cd1aab7712cc9253b0d32982a4d3e89b6407c972b5c788b4040adcd7278230f7c49b88e5b64a4dfbfc95c59e2ca00cb7aee8b6bbb00dac5e46d34b5ea70528f8fb0c30c31b233fc11abc0b99e6c781b392b6dd67065824f4040d6c5c11a9515ada88db341ef5d5db106", 0x5d}}, 0x2}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$P9_RCLUNK(r4, 0x0, 0x0) getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f0000001480), &(0x7f00000014c0)=0x8) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000001200)={0x2, 0x4e21, @multicast2}, 0x10) preadv(r5, &(0x7f00000017c0), 0x218, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000300001800600f7ff09000c00070000000000000000000800060073697001000000000000000008000800000000000000"], 0x44}, 0x1, 0xa00000000000000}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000011c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000001240)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00042bbd7000fcdbdf25020000001442658181635a3172000180060002000600000008000b00736970000400038044000380060007004e200000060007004e200000060007004e210000080001000000000008000100000000000600040004000000060004000400000005000800040000000800040003000000"], 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x24008084) 09:02:49 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000100)=""/4116, 0x1014}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0xac, 0x0) [ 1047.281913][T12940] general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN [ 1047.293661][T12940] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 1047.302076][T12940] CPU: 1 PID: 12940 Comm: syz-executor.5 Not tainted 5.8.0-rc3-syzkaller #0 [ 1047.310745][T12940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1047.320818][T12940] RIP: 0010:qrtr_endpoint_post+0x92/0x1010 [ 1047.326630][T12940] Code: 44 89 e6 e8 c0 52 50 fe 48 85 c0 48 89 c5 0f 84 c4 0e 00 00 e8 4f 66 96 f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 48 89 da 83 e2 07 38 d0 7f 08 84 c0 0f 85 4a 0d 00 00 [ 1047.327555][T12939] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1047.346232][T12940] RSP: 0018:ffffc900065a7c60 EFLAGS: 00010202 [ 1047.346245][T12940] RAX: dffffc0000000000 RBX: 0000000000000010 RCX: ffffc90013d5c000 [ 1047.346252][T12940] RDX: 0000000000000002 RSI: ffffffff87dd50d1 RDI: ffff8880887c9410 [ 1047.346260][T12940] RBP: ffff8880887c9400 R08: 0000000000000001 R09: ffff88804a641023 [ 1047.346268][T12940] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1047.346274][T12940] R13: ffff8880a7ac0a00 R14: ffffc900065a7ec8 R15: 0000000000000000 [ 1047.346285][T12940] FS: 00007f576cf47700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 1047.346292][T12940] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1047.346299][T12940] CR2: 000000000050ccf0 CR3: 00000000a1195000 CR4: 00000000001406e0 [ 1047.346317][T12940] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1047.432841][T12940] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1047.440809][T12940] Call Trace: [ 1047.444115][T12940] ? __check_object_size+0x30/0x3e4 [ 1047.449325][T12940] qrtr_tun_write_iter+0xf5/0x180 [ 1047.454356][T12940] new_sync_write+0x422/0x650 [ 1047.459033][T12940] ? new_sync_read+0x6e0/0x6e0 [ 1047.463804][T12940] ? inode_security+0x102/0x130 [ 1047.468661][T12940] ? security_file_permission+0x239/0x470 [ 1047.474380][T12940] __vfs_write+0xc9/0x100 [ 1047.478723][T12940] vfs_write+0x268/0x5d0 [ 1047.482980][T12940] ksys_write+0x12d/0x250 [ 1047.487308][T12940] ? __ia32_sys_read+0xb0/0xb0 [ 1047.492073][T12940] ? lock_is_held_type+0xb0/0xe0 [ 1047.497024][T12940] ? do_syscall_64+0x1c/0xe0 [ 1047.501618][T12940] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1047.507607][T12940] do_syscall_64+0x60/0xe0 [ 1047.512059][T12940] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1047.517950][T12940] RIP: 0033:0x45cb29 [ 1047.521831][T12940] Code: Bad RIP value. 09:02:49 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x2) r2 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x9c) [ 1047.525889][T12940] RSP: 002b:00007f576cf46c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1047.534298][T12940] RAX: ffffffffffffffda RBX: 000000000050cce0 RCX: 000000000045cb29 [ 1047.542276][T12940] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 1047.550251][T12940] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1047.558251][T12940] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1047.566232][T12940] R13: 0000000000000cda R14: 00000000004cf3c8 R15: 00007f576cf476d4 [ 1047.574208][T12940] Modules linked in: [ 1047.581729][T12940] ---[ end trace 61a09971324c6bd7 ]--- [ 1047.587219][T12940] RIP: 0010:qrtr_endpoint_post+0x92/0x1010 [ 1047.593387][T12940] Code: 44 89 e6 e8 c0 52 50 fe 48 85 c0 48 89 c5 0f 84 c4 0e 00 00 e8 4f 66 96 f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 48 89 da 83 e2 07 38 d0 7f 08 84 c0 0f 85 4a 0d 00 00 [ 1047.613924][T12940] RSP: 0018:ffffc900065a7c60 EFLAGS: 00010202 [ 1047.620353][T12940] RAX: dffffc0000000000 RBX: 0000000000000010 RCX: ffffc90013d5c000 [ 1047.628330][T12940] RDX: 0000000000000002 RSI: ffffffff87dd50d1 RDI: ffff8880887c9410 [ 1047.636685][T12940] RBP: ffff8880887c9400 R08: 0000000000000001 R09: ffff88804a641023 [ 1047.645020][T12940] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1047.653330][T12940] R13: ffff8880a7ac0a00 R14: ffffc900065a7ec8 R15: 0000000000000000 [ 1047.663540][T12940] FS: 00007f576cf47700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 1047.673872][T12940] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1047.697294][T12940] CR2: 00007f2f1133e008 CR3: 00000000a1195000 CR4: 00000000001406f0 [ 1047.699085][T12953] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1047.706299][T12940] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1047.722919][T12940] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1047.730940][T12940] Kernel panic - not syncing: Fatal exception [ 1047.738579][T12940] Kernel Offset: disabled [ 1047.742901][T12940] Rebooting in 86400 seconds..