DB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  722.002888][    C0] sd 0:0:1:0: [sg0] tag#6977 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  722.012672][    C0] sd 0:0:1:0: [sg0] tag#6977 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  722.022457][    C0] sd 0:0:1:0: [sg0] tag#6977 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  722.032231][    C0] sd 0:0:1:0: [sg0] tag#6977 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  722.042019][    C0] sd 0:0:1:0: [sg0] tag#6977 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  722.051824][    C0] sd 0:0:1:0: [sg0] tag#6977 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  722.058488][T27566] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:41:51 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

[  722.061534][    C0] sd 0:0:1:0: [sg0] tag#6977 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  722.079437][    C0] sd 0:0:1:0: [sg0] tag#6977 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  722.089280][    C0] sd 0:0:1:0: [sg0] tag#6977 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  722.148575][    C1] sd 0:0:1:0: [sg0] tag#6978 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  722.158216][    C1] sd 0:0:1:0: [sg0] tag#6978 CDB: Test Unit Ready
[  722.164883][    C1] sd 0:0:1:0: [sg0] tag#6978 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  722.174653][    C1] sd 0:0:1:0: [sg0] tag#6978 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  722.184437][    C1] sd 0:0:1:0: [sg0] tag#6978 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  722.194261][    C1] sd 0:0:1:0: [sg0] tag#6978 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  722.204036][    C1] sd 0:0:1:0: [sg0] tag#6978 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  722.213800][    C1] sd 0:0:1:0: [sg0] tag#6978 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  722.223568][    C1] sd 0:0:1:0: [sg0] tag#6978 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  722.233323][    C1] sd 0:0:1:0: [sg0] tag#6978 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  722.243090][    C1] sd 0:0:1:0: [sg0] tag#6978 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  722.252850][    C1] sd 0:0:1:0: [sg0] tag#6978 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  722.262599][    C1] sd 0:0:1:0: [sg0] tag#6978 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  722.272356][    C1] sd 0:0:1:0: [sg0] tag#6978 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  722.282106][    C1] sd 0:0:1:0: [sg0] tag#6978 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  722.291864][    C1] sd 0:0:1:0: [sg0] tag#6978 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  722.301600][    C1] sd 0:0:1:0: [sg0] tag#6978 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:41:51 executing program 4:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
sendmmsg(r0, &(0x7f0000004580)=[{{&(0x7f0000000200)=@xdp, 0x80, 0x0}}], 0x1, 0x0)

09:41:51 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(0xffffffffffffffff, r2, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r4 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r4, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r4, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:41:51 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r0 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:41:51 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:41:51 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r6, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:41:51 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

[  722.636056][    C1] sd 0:0:1:0: [sg0] tag#6979 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  722.645701][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB: Test Unit Ready
[  722.652361][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  722.662126][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  722.671980][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:41:51 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r0 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

[  722.681860][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  722.691593][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  722.701406][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  722.711209][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  722.720999][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  722.730784][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  722.740594][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  722.750352][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  722.760156][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  722.769951][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:41:51 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000400)="3bdd0fad14d4f6b37c81d903c3c7e7359c87bd6e6d5c7649221a4e24dbd5d98c53c5c8b7ad3f07547ddee04ebccf6dbb9b29521c81bdfc1985aaf51bb82ecad12ae5438c2d57735075653f6895af69daf7cf8108c7738fb92c8391e99de0b2565ec7d2f373c3b447033968b7405cbce6f4bdd51b0a4b8933928067e8c05572c7", 0x80, 0x0, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000140)=0x2, 0x4)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)
shutdown(r0, 0x1)

[  722.779748][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  722.789512][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  722.820963][T27596] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:41:51 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:41:52 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:41:52 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:41:52 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(0x0, 0x0, 0x5)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r0 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:41:52 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r6, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:41:52 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

[  723.378984][T27628] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:41:52 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(0x0, 0x0, 0x5)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r0 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:41:52 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:41:52 executing program 4:
mknod(&(0x7f0000000040)='./bus\x00', 0x2000008000, 0x86128)
accept$unix(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="0701a277dc5745192a101023000000000000ff045ad35a05d5000004"], 0x0)
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x6, 0x0)
write(r0, &(0x7f0000000140)="220e228901001c067ebc74a7ea11cf801bf1fa48f4445ed5", 0x18)
pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff03}], 0x100000000000005e, 0x0)

09:41:52 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:41:52 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r6, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:41:52 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:41:52 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(0x0, 0x0, 0x5)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r0 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:41:52 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:41:52 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0), 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r6, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  723.906100][T27652] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:41:53 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r0 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

[  724.100765][T27664] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
09:41:53 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:41:53 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:41:53 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r6, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:41:53 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  724.470059][T27682] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  724.498901][    C0] scsi_io_completion_action: 6 callbacks suppressed
[  724.499001][    C0] sd 0:0:1:0: [sg0] tag#6986 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  724.515497][    C0] sd 0:0:1:0: [sg0] tag#6986 CDB: Test Unit Ready
[  724.522135][    C0] sd 0:0:1:0: [sg0] tag#6986 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  724.531915][    C0] sd 0:0:1:0: [sg0] tag#6986 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  724.541719][    C0] sd 0:0:1:0: [sg0] tag#6986 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  724.551510][    C0] sd 0:0:1:0: [sg0] tag#6986 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  724.561310][    C0] sd 0:0:1:0: [sg0] tag#6986 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  724.571115][    C0] sd 0:0:1:0: [sg0] tag#6986 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  724.580906][    C0] sd 0:0:1:0: [sg0] tag#6986 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  724.590698][    C0] sd 0:0:1:0: [sg0] tag#6986 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  724.600500][    C0] sd 0:0:1:0: [sg0] tag#6986 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  724.610273][    C0] sd 0:0:1:0: [sg0] tag#6986 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  724.617953][    C1] sd 0:0:1:0: [sg0] tag#6987 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  724.620037][    C0] sd 0:0:1:0: [sg0] tag#6986 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  724.629502][    C1] sd 0:0:1:0: [sg0] tag#6987 CDB: Test Unit Ready
[  724.639142][    C0] sd 0:0:1:0: [sg0] tag#6986 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  724.645673][    C1] sd 0:0:1:0: [sg0] tag#6987 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  724.655274][    C0] sd 0:0:1:0: [sg0] tag#6986 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  724.664939][    C1] sd 0:0:1:0: [sg0] tag#6987 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  724.674542][    C0] sd 0:0:1:0: [sg0] tag#6986 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  724.684163][    C1] sd 0:0:1:0: [sg0] tag#6987 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  724.693790][    C0] sd 0:0:1:0: [sg0] tag#6986 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:41:53 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r0 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:41:53 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  724.703410][    C1] sd 0:0:1:0: [sg0] tag#6987 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  724.721610][    C1] sd 0:0:1:0: [sg0] tag#6987 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  724.731347][    C1] sd 0:0:1:0: [sg0] tag#6987 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  724.741119][    C1] sd 0:0:1:0: [sg0] tag#6987 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  724.750917][    C1] sd 0:0:1:0: [sg0] tag#6987 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  724.760710][    C1] sd 0:0:1:0: [sg0] tag#6987 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  724.770457][    C1] sd 0:0:1:0: [sg0] tag#6987 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  724.780201][    C1] sd 0:0:1:0: [sg0] tag#6987 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  724.789952][    C1] sd 0:0:1:0: [sg0] tag#6987 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  724.799732][    C1] sd 0:0:1:0: [sg0] tag#6987 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  724.809505][    C1] sd 0:0:1:0: [sg0] tag#6987 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  724.819266][    C1] sd 0:0:1:0: [sg0] tag#6987 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:41:54 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:41:54 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r6, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:41:54 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r4 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r4, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r4, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  725.081145][    C1] sd 0:0:1:0: [sg0] tag#6988 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  725.090794][    C1] sd 0:0:1:0: [sg0] tag#6988 CDB: Test Unit Ready
[  725.097474][    C1] sd 0:0:1:0: [sg0] tag#6988 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.107245][    C1] sd 0:0:1:0: [sg0] tag#6988 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.117054][    C1] sd 0:0:1:0: [sg0] tag#6988 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.126816][    C1] sd 0:0:1:0: [sg0] tag#6988 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.136579][    C1] sd 0:0:1:0: [sg0] tag#6988 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.137130][T27702] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  725.146331][    C1] sd 0:0:1:0: [sg0] tag#6988 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.146413][    C1] sd 0:0:1:0: [sg0] tag#6988 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.173911][    C1] sd 0:0:1:0: [sg0] tag#6988 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.183664][    C1] sd 0:0:1:0: [sg0] tag#6988 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.193410][    C1] sd 0:0:1:0: [sg0] tag#6988 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.199517][    C0] sd 0:0:1:0: [sg0] tag#6989 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  725.203150][    C1] sd 0:0:1:0: [sg0] tag#6988 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.203263][    C1] sd 0:0:1:0: [sg0] tag#6988 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.212726][    C0] sd 0:0:1:0: [sg0] tag#6989 CDB: Test Unit Ready
[  725.222364][    C1] sd 0:0:1:0: [sg0] tag#6988 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.232015][    C0] sd 0:0:1:0: [sg0] tag#6989 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.238464][    C1] sd 0:0:1:0: [sg0] tag#6988 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.248150][    C0] sd 0:0:1:0: [sg0] tag#6989 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.257754][    C1] sd 0:0:1:0: [sg0] tag#6988 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  725.267389][    C0] sd 0:0:1:0: [sg0] tag#6989 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.295310][    C0] sd 0:0:1:0: [sg0] tag#6989 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.305143][    C0] sd 0:0:1:0: [sg0] tag#6989 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.314930][    C0] sd 0:0:1:0: [sg0] tag#6989 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:41:54 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  725.324748][    C0] sd 0:0:1:0: [sg0] tag#6989 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.334537][    C0] sd 0:0:1:0: [sg0] tag#6989 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.344360][    C0] sd 0:0:1:0: [sg0] tag#6989 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.354128][    C0] sd 0:0:1:0: [sg0] tag#6989 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.363936][    C0] sd 0:0:1:0: [sg0] tag#6989 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:41:54 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

[  725.373712][    C0] sd 0:0:1:0: [sg0] tag#6989 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.383452][    C0] sd 0:0:1:0: [sg0] tag#6989 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.393231][    C0] sd 0:0:1:0: [sg0] tag#6989 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.403074][    C0] sd 0:0:1:0: [sg0] tag#6989 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:41:54 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r0 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:41:54 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0), 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r6, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  725.645413][    C0] sd 0:0:1:0: [sg0] tag#6990 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  725.655165][    C0] sd 0:0:1:0: [sg0] tag#6990 CDB: Test Unit Ready
[  725.661838][    C0] sd 0:0:1:0: [sg0] tag#6990 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.671558][    C0] sd 0:0:1:0: [sg0] tag#6990 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.681304][    C0] sd 0:0:1:0: [sg0] tag#6990 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.691152][    C0] sd 0:0:1:0: [sg0] tag#6990 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.700962][    C0] sd 0:0:1:0: [sg0] tag#6990 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.710744][    C0] sd 0:0:1:0: [sg0] tag#6990 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.720560][    C0] sd 0:0:1:0: [sg0] tag#6990 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.730333][    C0] sd 0:0:1:0: [sg0] tag#6990 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.740148][    C0] sd 0:0:1:0: [sg0] tag#6990 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.748992][T27718] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  725.749914][    C0] sd 0:0:1:0: [sg0] tag#6990 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.767787][    C0] sd 0:0:1:0: [sg0] tag#6990 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.777596][    C0] sd 0:0:1:0: [sg0] tag#6990 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.787357][    C0] sd 0:0:1:0: [sg0] tag#6990 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.797180][    C0] sd 0:0:1:0: [sg0] tag#6990 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.800395][    C1] sd 0:0:1:0: [sg0] tag#6991 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  725.806935][    C0] sd 0:0:1:0: [sg0] tag#6990 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  725.825120][    C1] sd 0:0:1:0: [sg0] tag#6991 CDB: Test Unit Ready
[  725.831696][    C1] sd 0:0:1:0: [sg0] tag#6991 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.841470][    C1] sd 0:0:1:0: [sg0] tag#6991 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.851249][    C1] sd 0:0:1:0: [sg0] tag#6991 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.861053][    C1] sd 0:0:1:0: [sg0] tag#6991 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.870809][    C1] sd 0:0:1:0: [sg0] tag#6991 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.880572][    C1] sd 0:0:1:0: [sg0] tag#6991 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.890355][    C1] sd 0:0:1:0: [sg0] tag#6991 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.900115][    C1] sd 0:0:1:0: [sg0] tag#6991 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.909869][    C1] sd 0:0:1:0: [sg0] tag#6991 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.919633][    C1] sd 0:0:1:0: [sg0] tag#6991 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.929394][    C1] sd 0:0:1:0: [sg0] tag#6991 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:41:55 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r6], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  725.939156][    C1] sd 0:0:1:0: [sg0] tag#6991 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.948930][    C1] sd 0:0:1:0: [sg0] tag#6991 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.958720][    C1] sd 0:0:1:0: [sg0] tag#6991 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  725.968474][    C1] sd 0:0:1:0: [sg0] tag#6991 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:41:55 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:41:55 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r0 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:41:55 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:41:55 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r4 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r4, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r4, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:41:55 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0), 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r6, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  726.290372][T27728] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  726.325201][    C0] sd 0:0:1:0: [sg0] tag#6992 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  726.334851][    C0] sd 0:0:1:0: [sg0] tag#6992 CDB: Test Unit Ready
[  726.341433][    C0] sd 0:0:1:0: [sg0] tag#6992 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.351224][    C0] sd 0:0:1:0: [sg0] tag#6992 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.361000][    C0] sd 0:0:1:0: [sg0] tag#6992 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.366276][    C1] sd 0:0:1:0: [sg0] tag#6993 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  726.370873][    C0] sd 0:0:1:0: [sg0] tag#6992 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.380219][    C1] sd 0:0:1:0: [sg0] tag#6993 CDB: Test Unit Ready
[  726.389876][    C0] sd 0:0:1:0: [sg0] tag#6992 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.396375][    C1] sd 0:0:1:0: [sg0] tag#6993 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.406016][    C0] sd 0:0:1:0: [sg0] tag#6992 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.415705][    C1] sd 0:0:1:0: [sg0] tag#6993 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.425273][    C0] sd 0:0:1:0: [sg0] tag#6992 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.434891][    C1] sd 0:0:1:0: [sg0] tag#6993 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.444533][    C0] sd 0:0:1:0: [sg0] tag#6992 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.454167][    C1] sd 0:0:1:0: [sg0] tag#6993 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.463823][    C0] sd 0:0:1:0: [sg0] tag#6992 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.473456][    C1] sd 0:0:1:0: [sg0] tag#6993 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.483094][    C0] sd 0:0:1:0: [sg0] tag#6992 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.492732][    C1] sd 0:0:1:0: [sg0] tag#6993 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.502362][    C0] sd 0:0:1:0: [sg0] tag#6992 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.511992][    C1] sd 0:0:1:0: [sg0] tag#6993 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.521623][    C0] sd 0:0:1:0: [sg0] tag#6992 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.531260][    C1] sd 0:0:1:0: [sg0] tag#6993 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.540990][    C0] sd 0:0:1:0: [sg0] tag#6992 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.550635][    C1] sd 0:0:1:0: [sg0] tag#6993 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.560266][    C0] sd 0:0:1:0: [sg0] tag#6992 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.569895][    C1] sd 0:0:1:0: [sg0] tag#6993 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.579526][    C0] sd 0:0:1:0: [sg0] tag#6992 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  726.589152][    C1] sd 0:0:1:0: [sg0] tag#6993 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.607390][    C1] sd 0:0:1:0: [sg0] tag#6993 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.617157][    C1] sd 0:0:1:0: [sg0] tag#6993 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.626912][    C1] sd 0:0:1:0: [sg0] tag#6993 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.636766][    C1] sd 0:0:1:0: [sg0] tag#6993 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:41:55 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r0 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:41:55 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

[  726.684061][T27744] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  726.770529][    C1] sd 0:0:1:0: [sg0] tag#6994 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  726.780207][    C1] sd 0:0:1:0: [sg0] tag#6994 CDB: Test Unit Ready
[  726.787832][    C1] sd 0:0:1:0: [sg0] tag#6994 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.797600][    C1] sd 0:0:1:0: [sg0] tag#6994 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.807368][    C1] sd 0:0:1:0: [sg0] tag#6994 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.817183][    C1] sd 0:0:1:0: [sg0] tag#6994 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.826970][    C1] sd 0:0:1:0: [sg0] tag#6994 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.836695][    C1] sd 0:0:1:0: [sg0] tag#6994 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.846463][    C1] sd 0:0:1:0: [sg0] tag#6994 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.856270][    C1] sd 0:0:1:0: [sg0] tag#6994 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.866044][    C1] sd 0:0:1:0: [sg0] tag#6994 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.875842][    C1] sd 0:0:1:0: [sg0] tag#6994 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.885647][    C1] sd 0:0:1:0: [sg0] tag#6994 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.895425][    C1] sd 0:0:1:0: [sg0] tag#6994 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.905195][    C1] sd 0:0:1:0: [sg0] tag#6994 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:41:56 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r6], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  726.914946][    C1] sd 0:0:1:0: [sg0] tag#6994 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  726.924724][    C1] sd 0:0:1:0: [sg0] tag#6994 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  727.036214][T27759] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  727.051370][    C0] sd 0:0:1:0: [sg0] tag#6995 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  727.061007][    C0] sd 0:0:1:0: [sg0] tag#6995 CDB: Test Unit Ready
[  727.067602][    C0] sd 0:0:1:0: [sg0] tag#6995 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  727.077399][    C0] sd 0:0:1:0: [sg0] tag#6995 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  727.087149][    C0] sd 0:0:1:0: [sg0] tag#6995 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  727.096978][    C0] sd 0:0:1:0: [sg0] tag#6995 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  727.106710][    C0] sd 0:0:1:0: [sg0] tag#6995 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  727.116414][    C0] sd 0:0:1:0: [sg0] tag#6995 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  727.126097][    C0] sd 0:0:1:0: [sg0] tag#6995 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  727.135853][    C0] sd 0:0:1:0: [sg0] tag#6995 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  727.145571][    C0] sd 0:0:1:0: [sg0] tag#6995 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  727.155358][    C0] sd 0:0:1:0: [sg0] tag#6995 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  727.165129][    C0] sd 0:0:1:0: [sg0] tag#6995 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  727.175103][    C0] sd 0:0:1:0: [sg0] tag#6995 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:41:56 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  727.184883][    C0] sd 0:0:1:0: [sg0] tag#6995 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  727.194696][    C0] sd 0:0:1:0: [sg0] tag#6995 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  727.204483][    C0] sd 0:0:1:0: [sg0] tag#6995 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:41:56 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0), 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r6, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:41:56 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r4 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r4, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r4, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:41:56 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
syz_open_procfs(0x0, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r0 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:41:56 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:41:56 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r6], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  727.546556][T27768] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  727.625390][T27778] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:41:56 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0x0, 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:41:56 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:41:56 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
syz_genetlink_get_family_id$nbd(0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r0 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:41:56 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:41:57 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:41:57 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0x0, 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:41:57 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:41:57 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
syz_genetlink_get_family_id$nbd(0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r0 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:41:57 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:41:57 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  728.330324][T27807] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  728.422292][T27812] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
09:41:57 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0x0, 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:41:57 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
syz_genetlink_get_family_id$nbd(0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r0 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:41:57 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:41:57 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:41:57 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x0, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:41:57 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:41:57 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000001880))
r0 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:41:57 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  729.065459][T27846] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:41:58 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:41:58 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:41:58 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x0, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:41:58 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000001880))
r0 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

[  729.530790][    C1] scsi_io_completion_action: 9 callbacks suppressed
[  729.530896][    C1] sd 0:0:1:0: [sg0] tag#7017 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  729.547330][    C1] sd 0:0:1:0: [sg0] tag#7017 CDB: Test Unit Ready
[  729.553960][    C1] sd 0:0:1:0: [sg0] tag#7017 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  729.563708][    C1] sd 0:0:1:0: [sg0] tag#7017 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  729.573487][    C1] sd 0:0:1:0: [sg0] tag#7017 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  729.577636][    C0] sd 0:0:1:0: [sg0] tag#7018 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  729.583237][    C1] sd 0:0:1:0: [sg0] tag#7017 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  729.592742][    C0] sd 0:0:1:0: [sg0] tag#7018 CDB: Test Unit Ready
[  729.602331][    C1] sd 0:0:1:0: [sg0] tag#7017 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  729.608789][    C0] sd 0:0:1:0: [sg0] tag#7018 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  729.618429][    C1] sd 0:0:1:0: [sg0] tag#7017 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  729.628099][    C0] sd 0:0:1:0: [sg0] tag#7018 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  729.637680][    C1] sd 0:0:1:0: [sg0] tag#7017 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  729.647317][    C0] sd 0:0:1:0: [sg0] tag#7018 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  729.656941][    C1] sd 0:0:1:0: [sg0] tag#7017 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  729.666575][    C0] sd 0:0:1:0: [sg0] tag#7018 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  729.676195][    C1] sd 0:0:1:0: [sg0] tag#7017 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  729.685827][    C0] sd 0:0:1:0: [sg0] tag#7018 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  729.695471][    C1] sd 0:0:1:0: [sg0] tag#7017 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  729.705098][    C0] sd 0:0:1:0: [sg0] tag#7018 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  729.714724][    C1] sd 0:0:1:0: [sg0] tag#7017 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  729.724358][    C0] sd 0:0:1:0: [sg0] tag#7018 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  729.733979][    C1] sd 0:0:1:0: [sg0] tag#7017 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  729.743610][    C0] sd 0:0:1:0: [sg0] tag#7018 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  729.753224][    C1] sd 0:0:1:0: [sg0] tag#7017 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  729.762851][    C0] sd 0:0:1:0: [sg0] tag#7018 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  729.772480][    C1] sd 0:0:1:0: [sg0] tag#7017 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  729.782119][    C0] sd 0:0:1:0: [sg0] tag#7018 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  729.791699][    C1] sd 0:0:1:0: [sg0] tag#7017 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  729.801323][    C0] sd 0:0:1:0: [sg0] tag#7018 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  729.819561][    C0] sd 0:0:1:0: [sg0] tag#7018 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:41:58 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  729.829480][    C0] sd 0:0:1:0: [sg0] tag#7018 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  729.839229][    C0] sd 0:0:1:0: [sg0] tag#7018 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  729.849051][    C0] sd 0:0:1:0: [sg0] tag#7018 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:41:59 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000001880))
r0 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:41:59 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:41:59 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:41:59 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:41:59 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x0, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:41:59 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  730.410510][T27897] validate_nla: 2 callbacks suppressed
[  730.410636][T27897] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
09:41:59 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, 0x0)
r0 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

[  730.460226][T27898] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:41:59 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:41:59 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:41:59 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  730.710266][    C0] sd 0:0:1:0: [sg0] tag#7019 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  730.719926][    C0] sd 0:0:1:0: [sg0] tag#7019 CDB: Test Unit Ready
[  730.726648][    C0] sd 0:0:1:0: [sg0] tag#7019 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  730.736452][    C0] sd 0:0:1:0: [sg0] tag#7019 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  730.746303][    C0] sd 0:0:1:0: [sg0] tag#7019 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:41:59 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

[  730.756085][    C0] sd 0:0:1:0: [sg0] tag#7019 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  730.765865][    C0] sd 0:0:1:0: [sg0] tag#7019 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  730.775648][    C0] sd 0:0:1:0: [sg0] tag#7019 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  730.785424][    C0] sd 0:0:1:0: [sg0] tag#7019 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  730.795191][    C0] sd 0:0:1:0: [sg0] tag#7019 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  730.804969][    C0] sd 0:0:1:0: [sg0] tag#7019 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  730.814747][    C0] sd 0:0:1:0: [sg0] tag#7019 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  730.824542][    C0] sd 0:0:1:0: [sg0] tag#7019 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  730.834322][    C0] sd 0:0:1:0: [sg0] tag#7019 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  730.844109][    C0] sd 0:0:1:0: [sg0] tag#7019 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  730.853879][    C0] sd 0:0:1:0: [sg0] tag#7019 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  730.863813][    C0] sd 0:0:1:0: [sg0] tag#7019 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  730.872650][    C0] sd 0:0:1:0: [sg0] tag#7020 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  730.882288][    C0] sd 0:0:1:0: [sg0] tag#7020 CDB: Test Unit Ready
[  730.888881][    C0] sd 0:0:1:0: [sg0] tag#7020 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  730.898692][    C0] sd 0:0:1:0: [sg0] tag#7020 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  730.908483][    C0] sd 0:0:1:0: [sg0] tag#7020 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  730.918318][    C0] sd 0:0:1:0: [sg0] tag#7020 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  730.928130][    C0] sd 0:0:1:0: [sg0] tag#7020 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  730.937949][    C0] sd 0:0:1:0: [sg0] tag#7020 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  730.947730][    C0] sd 0:0:1:0: [sg0] tag#7020 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  730.957515][    C0] sd 0:0:1:0: [sg0] tag#7020 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  730.967295][    C0] sd 0:0:1:0: [sg0] tag#7020 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  730.977086][    C0] sd 0:0:1:0: [sg0] tag#7020 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  730.986837][    C0] sd 0:0:1:0: [sg0] tag#7020 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  730.996600][    C0] sd 0:0:1:0: [sg0] tag#7020 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.006427][    C0] sd 0:0:1:0: [sg0] tag#7020 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.016179][    C0] sd 0:0:1:0: [sg0] tag#7020 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.025963][    C0] sd 0:0:1:0: [sg0] tag#7020 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  731.034813][    C0] sd 0:0:1:0: [sg0] tag#7021 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  731.044407][    C0] sd 0:0:1:0: [sg0] tag#7021 CDB: Test Unit Ready
[  731.050989][    C0] sd 0:0:1:0: [sg0] tag#7021 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:00 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, 0x0)
r0 = syz_open_dev$video(0x0, 0x9, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

[  731.060769][    C0] sd 0:0:1:0: [sg0] tag#7021 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.070552][    C0] sd 0:0:1:0: [sg0] tag#7021 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.080340][    C0] sd 0:0:1:0: [sg0] tag#7021 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.090129][    C0] sd 0:0:1:0: [sg0] tag#7021 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.099918][    C0] sd 0:0:1:0: [sg0] tag#7021 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.109692][    C0] sd 0:0:1:0: [sg0] tag#7021 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.119480][    C0] sd 0:0:1:0: [sg0] tag#7021 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.129260][    C0] sd 0:0:1:0: [sg0] tag#7021 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.139022][    C0] sd 0:0:1:0: [sg0] tag#7021 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.148766][    C0] sd 0:0:1:0: [sg0] tag#7021 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.158540][    C0] sd 0:0:1:0: [sg0] tag#7021 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.168315][    C0] sd 0:0:1:0: [sg0] tag#7021 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.178070][    C0] sd 0:0:1:0: [sg0] tag#7021 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.187842][    C0] sd 0:0:1:0: [sg0] tag#7021 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:42:00 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(0xffffffffffffffff, r1, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r2 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r3], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000700))
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  731.429697][    C1] sd 0:0:1:0: [sg0] tag#7022 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  731.439391][    C1] sd 0:0:1:0: [sg0] tag#7022 CDB: Test Unit Ready
[  731.446066][    C1] sd 0:0:1:0: [sg0] tag#7022 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.455870][    C1] sd 0:0:1:0: [sg0] tag#7022 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.465827][    C1] sd 0:0:1:0: [sg0] tag#7022 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.475607][    C1] sd 0:0:1:0: [sg0] tag#7022 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.485406][    C1] sd 0:0:1:0: [sg0] tag#7022 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.495198][    C1] sd 0:0:1:0: [sg0] tag#7022 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.505244][    C1] sd 0:0:1:0: [sg0] tag#7022 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.515038][    C1] sd 0:0:1:0: [sg0] tag#7022 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.524765][    C1] sd 0:0:1:0: [sg0] tag#7022 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.534521][    C1] sd 0:0:1:0: [sg0] tag#7022 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.544291][    C1] sd 0:0:1:0: [sg0] tag#7022 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.554077][    C1] sd 0:0:1:0: [sg0] tag#7022 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.563857][    C1] sd 0:0:1:0: [sg0] tag#7022 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:00 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  731.573623][    C1] sd 0:0:1:0: [sg0] tag#7022 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.574464][T27936] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  731.583406][    C1] sd 0:0:1:0: [sg0] tag#7022 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:42:00 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

[  731.660472][    C0] sd 0:0:1:0: [sg0] tag#7023 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  731.670145][    C0] sd 0:0:1:0: [sg0] tag#7023 CDB: Test Unit Ready
[  731.676816][    C0] sd 0:0:1:0: [sg0] tag#7023 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.686598][    C0] sd 0:0:1:0: [sg0] tag#7023 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.696482][    C0] sd 0:0:1:0: [sg0] tag#7023 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.706306][    C0] sd 0:0:1:0: [sg0] tag#7023 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.716130][    C0] sd 0:0:1:0: [sg0] tag#7023 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.725921][    C0] sd 0:0:1:0: [sg0] tag#7023 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.735716][    C0] sd 0:0:1:0: [sg0] tag#7023 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.745514][    C0] sd 0:0:1:0: [sg0] tag#7023 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.755277][    C0] sd 0:0:1:0: [sg0] tag#7023 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.765047][    C0] sd 0:0:1:0: [sg0] tag#7023 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.774817][    C0] sd 0:0:1:0: [sg0] tag#7023 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.784613][    C0] sd 0:0:1:0: [sg0] tag#7023 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.794419][    C0] sd 0:0:1:0: [sg0] tag#7023 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:00 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(0xffffffffffffffff, r1, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r2 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r3], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000700))
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  731.804216][    C0] sd 0:0:1:0: [sg0] tag#7023 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  731.814011][    C0] sd 0:0:1:0: [sg0] tag#7023 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:42:01 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:01 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:01 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, 0x0)
r0 = syz_open_dev$video(0x0, 0x9, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

[  732.181687][T27951] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  732.262120][    C0] sd 0:0:1:0: [sg0] tag#7024 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  732.271857][    C0] sd 0:0:1:0: [sg0] tag#7024 CDB: Test Unit Ready
[  732.278453][    C0] sd 0:0:1:0: [sg0] tag#7024 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  732.288248][    C0] sd 0:0:1:0: [sg0] tag#7024 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  732.298045][    C0] sd 0:0:1:0: [sg0] tag#7024 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  732.307929][    C0] sd 0:0:1:0: [sg0] tag#7024 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  732.318693][    C0] sd 0:0:1:0: [sg0] tag#7024 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  732.328217][    C1] sd 0:0:1:0: [sg0] tag#7025 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  732.328484][    C0] sd 0:0:1:0: [sg0] tag#7024 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  732.337860][    C1] sd 0:0:1:0: [sg0] tag#7025 CDB: Test Unit Ready
[  732.347520][    C0] sd 0:0:1:0: [sg0] tag#7024 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  732.354028][    C1] sd 0:0:1:0: [sg0] tag#7025 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  732.363749][    C0] sd 0:0:1:0: [sg0] tag#7024 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  732.373404][    C1] sd 0:0:1:0: [sg0] tag#7025 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  732.382997][    C0] sd 0:0:1:0: [sg0] tag#7024 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  732.392613][    C1] sd 0:0:1:0: [sg0] tag#7025 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  732.402244][    C0] sd 0:0:1:0: [sg0] tag#7024 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  732.411875][    C1] sd 0:0:1:0: [sg0] tag#7025 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  732.421458][    C0] sd 0:0:1:0: [sg0] tag#7024 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  732.431106][    C1] sd 0:0:1:0: [sg0] tag#7025 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  732.440741][    C0] sd 0:0:1:0: [sg0] tag#7024 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  732.450359][    C1] sd 0:0:1:0: [sg0] tag#7025 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  732.460033][    C0] sd 0:0:1:0: [sg0] tag#7024 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  732.469662][    C1] sd 0:0:1:0: [sg0] tag#7025 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  732.479304][    C0] sd 0:0:1:0: [sg0] tag#7024 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  732.488923][    C1] sd 0:0:1:0: [sg0] tag#7025 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  732.498573][    C0] sd 0:0:1:0: [sg0] tag#7024 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  732.508197][    C1] sd 0:0:1:0: [sg0] tag#7025 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  732.526373][    C1] sd 0:0:1:0: [sg0] tag#7025 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  732.536103][    C1] sd 0:0:1:0: [sg0] tag#7025 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  732.545863][    C1] sd 0:0:1:0: [sg0] tag#7025 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:01 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

[  732.555644][    C1] sd 0:0:1:0: [sg0] tag#7025 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  732.566111][    C1] sd 0:0:1:0: [sg0] tag#7025 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  732.575892][    C1] sd 0:0:1:0: [sg0] tag#7025 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:42:01 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:01 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(0xffffffffffffffff, r1, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r2 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r3], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000700))
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:01 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:01 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

[  732.926045][T27972] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:42:02 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r0 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r4 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r4, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r4, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  733.033292][    C1] sd 0:0:1:0: [sg0] tag#7026 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  733.042931][    C1] sd 0:0:1:0: [sg0] tag#7026 CDB: Test Unit Ready
[  733.049520][    C1] sd 0:0:1:0: [sg0] tag#7026 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  733.059325][    C1] sd 0:0:1:0: [sg0] tag#7026 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  733.070053][    C1] sd 0:0:1:0: [sg0] tag#7026 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  733.079809][    C1] sd 0:0:1:0: [sg0] tag#7026 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  733.089569][    C1] sd 0:0:1:0: [sg0] tag#7026 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  733.099319][    C1] sd 0:0:1:0: [sg0] tag#7026 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  733.109090][    C1] sd 0:0:1:0: [sg0] tag#7026 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  733.118854][    C1] sd 0:0:1:0: [sg0] tag#7026 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  733.128633][    C1] sd 0:0:1:0: [sg0] tag#7026 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  733.138403][    C1] sd 0:0:1:0: [sg0] tag#7026 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  733.148180][    C1] sd 0:0:1:0: [sg0] tag#7026 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  733.157951][    C1] sd 0:0:1:0: [sg0] tag#7026 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  733.167747][    C1] sd 0:0:1:0: [sg0] tag#7026 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:02 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  733.177514][    C1] sd 0:0:1:0: [sg0] tag#7026 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  733.187335][    C1] sd 0:0:1:0: [sg0] tag#7026 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:42:02 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, 0x0)
r0 = syz_open_dev$video(0x0, 0x9, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

[  733.414004][T27987] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:42:02 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:02 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:42:02 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:02 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:03 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:03 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r0 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r4 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r4, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r4, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  733.940320][T28008] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:42:03 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:42:03 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:03 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, 0x0)
r0 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x0, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:42:03 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:42:03 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:03 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r0 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r4 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r4, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r4, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:03 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:03 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, 0x0)
r0 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x0, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:42:03 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=r5], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r6, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:03 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, 0x0)
r0 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x0, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

[  734.790060][T28041] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  734.835565][    C0] scsi_io_completion_action: 5 callbacks suppressed
[  734.835668][    C0] sd 0:0:1:0: [sg0] tag#7037 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  734.852120][    C0] sd 0:0:1:0: [sg0] tag#7037 CDB: Test Unit Ready
[  734.858710][    C0] sd 0:0:1:0: [sg0] tag#7037 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  734.868500][    C0] sd 0:0:1:0: [sg0] tag#7037 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  734.878276][    C0] sd 0:0:1:0: [sg0] tag#7037 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  734.888132][    C0] sd 0:0:1:0: [sg0] tag#7037 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  734.897919][    C0] sd 0:0:1:0: [sg0] tag#7037 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  734.907702][    C0] sd 0:0:1:0: [sg0] tag#7037 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  734.917488][    C0] sd 0:0:1:0: [sg0] tag#7037 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  734.927280][    C0] sd 0:0:1:0: [sg0] tag#7037 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  734.938467][    C0] sd 0:0:1:0: [sg0] tag#7037 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  734.948250][    C0] sd 0:0:1:0: [sg0] tag#7037 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  734.958003][    C0] sd 0:0:1:0: [sg0] tag#7037 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  734.967788][    C0] sd 0:0:1:0: [sg0] tag#7037 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  734.977584][    C0] sd 0:0:1:0: [sg0] tag#7037 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  734.987358][    C0] sd 0:0:1:0: [sg0] tag#7037 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  734.997145][    C0] sd 0:0:1:0: [sg0] tag#7037 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:42:04 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=r5], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r6, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:04 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:04 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:04 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

[  735.256301][    C0] sd 0:0:1:0: [sg0] tag#7038 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  735.265990][    C0] sd 0:0:1:0: [sg0] tag#7038 CDB: Test Unit Ready
[  735.272661][    C0] sd 0:0:1:0: [sg0] tag#7038 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.282439][    C0] sd 0:0:1:0: [sg0] tag#7038 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.292239][    C0] sd 0:0:1:0: [sg0] tag#7038 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.294989][T28058] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  735.302072][    C0] sd 0:0:1:0: [sg0] tag#7038 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.302166][    C0] sd 0:0:1:0: [sg0] tag#7038 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.302255][    C0] sd 0:0:1:0: [sg0] tag#7038 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.302340][    C0] sd 0:0:1:0: [sg0] tag#7038 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.302420][    C0] sd 0:0:1:0: [sg0] tag#7038 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.359061][    C0] sd 0:0:1:0: [sg0] tag#7038 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.368865][    C0] sd 0:0:1:0: [sg0] tag#7038 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.378652][    C0] sd 0:0:1:0: [sg0] tag#7038 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.388452][    C0] sd 0:0:1:0: [sg0] tag#7038 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:04 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, 0x0)
syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

[  735.398244][    C0] sd 0:0:1:0: [sg0] tag#7038 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.408127][    C0] sd 0:0:1:0: [sg0] tag#7038 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.411667][T28040] vivid-003: kernel_thread() failed
[  735.417903][    C0] sd 0:0:1:0: [sg0] tag#7038 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  735.438964][    C1] sd 0:0:1:0: [sg0] tag#7039 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  735.448609][    C1] sd 0:0:1:0: [sg0] tag#7039 CDB: Test Unit Ready
[  735.455278][    C1] sd 0:0:1:0: [sg0] tag#7039 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.465045][    C1] sd 0:0:1:0: [sg0] tag#7039 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.474840][    C1] sd 0:0:1:0: [sg0] tag#7039 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.484676][    C1] sd 0:0:1:0: [sg0] tag#7039 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.494450][    C1] sd 0:0:1:0: [sg0] tag#7039 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.504225][    C1] sd 0:0:1:0: [sg0] tag#7039 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.513987][    C1] sd 0:0:1:0: [sg0] tag#7039 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.523742][    C1] sd 0:0:1:0: [sg0] tag#7039 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.533506][    C1] sd 0:0:1:0: [sg0] tag#7039 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.543300][    C1] sd 0:0:1:0: [sg0] tag#7039 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:04 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  735.553067][    C1] sd 0:0:1:0: [sg0] tag#7039 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.562852][    C1] sd 0:0:1:0: [sg0] tag#7039 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.572650][    C1] sd 0:0:1:0: [sg0] tag#7039 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.582459][    C1] sd 0:0:1:0: [sg0] tag#7039 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.592313][    C1] sd 0:0:1:0: [sg0] tag#7039 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:42:04 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  735.734507][    C1] sd 0:0:1:0: [sg0] tag#6976 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  735.744354][    C1] sd 0:0:1:0: [sg0] tag#6976 CDB: Test Unit Ready
[  735.750968][    C1] sd 0:0:1:0: [sg0] tag#6976 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.760768][    C1] sd 0:0:1:0: [sg0] tag#6976 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.770553][    C1] sd 0:0:1:0: [sg0] tag#6976 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.780378][    C1] sd 0:0:1:0: [sg0] tag#6976 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.790156][    C1] sd 0:0:1:0: [sg0] tag#6976 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.800093][    C1] sd 0:0:1:0: [sg0] tag#6976 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.809892][    C1] sd 0:0:1:0: [sg0] tag#6976 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.819695][    C1] sd 0:0:1:0: [sg0] tag#6976 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.829474][    C1] sd 0:0:1:0: [sg0] tag#6976 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.839400][    C1] sd 0:0:1:0: [sg0] tag#6976 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.849193][    C1] sd 0:0:1:0: [sg0] tag#6976 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.858997][    C1] sd 0:0:1:0: [sg0] tag#6976 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.868759][    C1] sd 0:0:1:0: [sg0] tag#6976 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.878586][    C1] sd 0:0:1:0: [sg0] tag#6976 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  735.888347][    C1] sd 0:0:1:0: [sg0] tag#6976 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:42:04 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=r5], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r6, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:05 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:05 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, 0x0)
syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:42:05 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  736.068512][T28086] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:42:05 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

[  736.250095][    C1] sd 0:0:1:0: [sg0] tag#6977 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  736.259800][    C1] sd 0:0:1:0: [sg0] tag#6977 CDB: Test Unit Ready
[  736.266560][    C1] sd 0:0:1:0: [sg0] tag#6977 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.276413][    C1] sd 0:0:1:0: [sg0] tag#6977 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.286350][    C1] sd 0:0:1:0: [sg0] tag#6977 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.296217][    C1] sd 0:0:1:0: [sg0] tag#6977 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.306116][    C1] sd 0:0:1:0: [sg0] tag#6977 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.315960][    C1] sd 0:0:1:0: [sg0] tag#6977 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.325841][    C1] sd 0:0:1:0: [sg0] tag#6977 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.335697][    C1] sd 0:0:1:0: [sg0] tag#6977 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.345524][    C1] sd 0:0:1:0: [sg0] tag#6977 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.355348][    C1] sd 0:0:1:0: [sg0] tag#6977 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.365164][    C1] sd 0:0:1:0: [sg0] tag#6977 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.375010][    C1] sd 0:0:1:0: [sg0] tag#6977 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.384849][    C1] sd 0:0:1:0: [sg0] tag#6977 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:05 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  736.394700][    C1] sd 0:0:1:0: [sg0] tag#6977 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.404528][    C1] sd 0:0:1:0: [sg0] tag#6977 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:42:05 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  736.521858][    C0] sd 0:0:1:0: [sg0] tag#6978 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  736.531499][    C0] sd 0:0:1:0: [sg0] tag#6978 CDB: Test Unit Ready
[  736.538198][    C0] sd 0:0:1:0: [sg0] tag#6978 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.548029][    C0] sd 0:0:1:0: [sg0] tag#6978 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.550805][    C1] sd 0:0:1:0: [sg0] tag#6979 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  736.557843][    C0] sd 0:0:1:0: [sg0] tag#6978 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.567296][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB: Test Unit Ready
[  736.567393][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.577045][    C0] sd 0:0:1:0: [sg0] tag#6978 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.583566][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.593191][    C0] sd 0:0:1:0: [sg0] tag#6978 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.602858][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.612470][    C0] sd 0:0:1:0: [sg0] tag#6978 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.622099][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.631685][    C0] sd 0:0:1:0: [sg0] tag#6978 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.641318][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.650983][    C0] sd 0:0:1:0: [sg0] tag#6978 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.660607][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.670234][    C0] sd 0:0:1:0: [sg0] tag#6978 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.679860][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.689488][    C0] sd 0:0:1:0: [sg0] tag#6978 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.699109][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.708743][    C0] sd 0:0:1:0: [sg0] tag#6978 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.718365][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.727997][    C0] sd 0:0:1:0: [sg0] tag#6978 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.737626][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.747260][    C0] sd 0:0:1:0: [sg0] tag#6978 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.756880][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.766521][    C0] sd 0:0:1:0: [sg0] tag#6978 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.776144][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.785774][    C0] sd 0:0:1:0: [sg0] tag#6978 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  736.795503][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:05 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, 0x0)
syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

[  736.823504][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  736.833276][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:42:05 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:42:06 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=r5], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r6, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  737.038437][T28097] vivid-003: kernel_thread() failed
09:42:06 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  737.121636][T28121] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:42:06 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:06 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  737.246960][    C0] sd 0:0:1:0: [sg0] tag#6980 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  737.256720][    C0] sd 0:0:1:0: [sg0] tag#6980 CDB: Test Unit Ready
[  737.263401][    C0] sd 0:0:1:0: [sg0] tag#6980 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.273177][    C0] sd 0:0:1:0: [sg0] tag#6980 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.283033][    C0] sd 0:0:1:0: [sg0] tag#6980 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:06 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, 0x0)
r0 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r0, 0x0, 0x0)

[  737.292838][    C0] sd 0:0:1:0: [sg0] tag#6980 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.302665][    C0] sd 0:0:1:0: [sg0] tag#6980 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.312404][    C0] sd 0:0:1:0: [sg0] tag#6980 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.322178][    C0] sd 0:0:1:0: [sg0] tag#6980 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.332021][    C0] sd 0:0:1:0: [sg0] tag#6980 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:06 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

[  737.341880][    C0] sd 0:0:1:0: [sg0] tag#6980 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.351606][    C0] sd 0:0:1:0: [sg0] tag#6980 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.361482][    C0] sd 0:0:1:0: [sg0] tag#6980 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.371262][    C0] sd 0:0:1:0: [sg0] tag#6980 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.381095][    C0] sd 0:0:1:0: [sg0] tag#6980 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.390989][    C0] sd 0:0:1:0: [sg0] tag#6980 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.400797][    C0] sd 0:0:1:0: [sg0] tag#6980 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  737.482241][    C1] sd 0:0:1:0: [sg0] tag#6981 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  737.491832][    C1] sd 0:0:1:0: [sg0] tag#6981 CDB: Test Unit Ready
[  737.498420][    C1] sd 0:0:1:0: [sg0] tag#6981 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.508209][    C1] sd 0:0:1:0: [sg0] tag#6981 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.517997][    C1] sd 0:0:1:0: [sg0] tag#6981 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.527820][    C1] sd 0:0:1:0: [sg0] tag#6981 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.537595][    C1] sd 0:0:1:0: [sg0] tag#6981 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.547393][    C1] sd 0:0:1:0: [sg0] tag#6981 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.557163][    C1] sd 0:0:1:0: [sg0] tag#6981 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.566978][    C1] sd 0:0:1:0: [sg0] tag#6981 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.576757][    C1] sd 0:0:1:0: [sg0] tag#6981 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.586566][    C1] sd 0:0:1:0: [sg0] tag#6981 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.596317][    C1] sd 0:0:1:0: [sg0] tag#6981 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.606059][    C1] sd 0:0:1:0: [sg0] tag#6981 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.615831][    C1] sd 0:0:1:0: [sg0] tag#6981 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.625637][    C1] sd 0:0:1:0: [sg0] tag#6981 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.635409][    C1] sd 0:0:1:0: [sg0] tag#6981 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:42:06 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=r5], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r6, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  737.722406][    C1] sd 0:0:1:0: [sg0] tag#6982 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  737.732086][    C1] sd 0:0:1:0: [sg0] tag#6982 CDB: Test Unit Ready
[  737.738713][    C1] sd 0:0:1:0: [sg0] tag#6982 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.748616][    C1] sd 0:0:1:0: [sg0] tag#6982 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.758400][    C1] sd 0:0:1:0: [sg0] tag#6982 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.768180][    C1] sd 0:0:1:0: [sg0] tag#6982 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.777945][    C1] sd 0:0:1:0: [sg0] tag#6982 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.787717][    C1] sd 0:0:1:0: [sg0] tag#6982 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.788522][T28145] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  737.797495][    C1] sd 0:0:1:0: [sg0] tag#6982 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.797585][    C1] sd 0:0:1:0: [sg0] tag#6982 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.797673][    C1] sd 0:0:1:0: [sg0] tag#6982 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.797762][    C1] sd 0:0:1:0: [sg0] tag#6982 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.797849][    C1] sd 0:0:1:0: [sg0] tag#6982 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.797934][    C1] sd 0:0:1:0: [sg0] tag#6982 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.798023][    C1] sd 0:0:1:0: [sg0] tag#6982 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.798112][    C1] sd 0:0:1:0: [sg0] tag#6982 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  737.798200][    C1] sd 0:0:1:0: [sg0] tag#6982 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:42:07 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:42:07 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, 0x0)
r0 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r0, 0x0, 0x0)

09:42:07 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:07 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:07 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:07 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=r5], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r6, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:07 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, 0x0)
r0 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r0, 0x0, 0x0)

[  738.431966][T28168] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:42:07 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:07 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, 0x0)
r0 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r0, &(0x7f00000007c0), 0x0)

09:42:07 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:07 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)

09:42:07 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:07 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:42:07 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, 0x0)
r0 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r0, &(0x7f00000007c0), 0x0)

[  738.835843][T28182] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:42:08 executing program 5:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:08 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, 0x0)
r0 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r0, &(0x7f00000007c0), 0x0)

09:42:08 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)

09:42:08 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:42:08 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:08 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:08 executing program 5:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:08 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, 0x0)
r0 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r0, &(0x7f00000007c0)=[{0x0}], 0x1)

[  739.465963][T28215] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:42:08 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:42:08 executing program 5:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:08 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, 0x0)
r0 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r0, &(0x7f00000007c0)=[{0x0}], 0x1)

09:42:08 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:08 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)

[  739.940163][    C1] scsi_io_completion_action: 11 callbacks suppressed
[  739.940263][    C1] sd 0:0:1:0: [sg0] tag#6997 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  739.941605][T28237] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  739.947258][    C1] sd 0:0:1:0: [sg0] tag#6997 CDB: Test Unit Ready
[  739.947349][    C1] sd 0:0:1:0: [sg0] tag#6997 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  739.947435][    C1] sd 0:0:1:0: [sg0] tag#6997 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  739.947538][    C1] sd 0:0:1:0: [sg0] tag#6997 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.000623][    C1] sd 0:0:1:0: [sg0] tag#6997 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.010351][    C1] sd 0:0:1:0: [sg0] tag#6997 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.020097][    C1] sd 0:0:1:0: [sg0] tag#6997 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.029849][    C1] sd 0:0:1:0: [sg0] tag#6997 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.039588][    C1] sd 0:0:1:0: [sg0] tag#6997 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.049324][    C1] sd 0:0:1:0: [sg0] tag#6997 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.059084][    C1] sd 0:0:1:0: [sg0] tag#6997 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.068813][    C1] sd 0:0:1:0: [sg0] tag#6997 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.078532][    C1] sd 0:0:1:0: [sg0] tag#6997 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:09 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, 0x0)
r0 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r0, &(0x7f00000007c0)=[{0x0}], 0x1)

[  740.088263][    C1] sd 0:0:1:0: [sg0] tag#6997 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.093723][    C0] sd 0:0:1:0: [sg0] tag#6998 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  740.098019][    C1] sd 0:0:1:0: [sg0] tag#6997 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.107470][    C0] sd 0:0:1:0: [sg0] tag#6998 CDB: Test Unit Ready
[  740.117083][    C1] sd 0:0:1:0: [sg0] tag#6997 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  740.123591][    C0] sd 0:0:1:0: [sg0] tag#6998 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.141875][    C0] sd 0:0:1:0: [sg0] tag#6998 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.151602][    C0] sd 0:0:1:0: [sg0] tag#6998 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.161374][    C0] sd 0:0:1:0: [sg0] tag#6998 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.171157][    C0] sd 0:0:1:0: [sg0] tag#6998 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.180901][    C0] sd 0:0:1:0: [sg0] tag#6998 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.190664][    C0] sd 0:0:1:0: [sg0] tag#6998 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.200440][    C0] sd 0:0:1:0: [sg0] tag#6998 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.210237][    C0] sd 0:0:1:0: [sg0] tag#6998 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.220005][    C0] sd 0:0:1:0: [sg0] tag#6998 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.229779][    C0] sd 0:0:1:0: [sg0] tag#6998 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.239545][    C0] sd 0:0:1:0: [sg0] tag#6998 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.249311][    C0] sd 0:0:1:0: [sg0] tag#6998 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.259096][    C0] sd 0:0:1:0: [sg0] tag#6998 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.261364][    C1] sd 0:0:1:0: [sg0] tag#6999 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  740.268878][    C0] sd 0:0:1:0: [sg0] tag#6998 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  740.287142][    C1] sd 0:0:1:0: [sg0] tag#6999 CDB: Test Unit Ready
[  740.293845][    C1] sd 0:0:1:0: [sg0] tag#6999 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.303623][    C1] sd 0:0:1:0: [sg0] tag#6999 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.313414][    C1] sd 0:0:1:0: [sg0] tag#6999 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.323170][    C1] sd 0:0:1:0: [sg0] tag#6999 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.333387][    C1] sd 0:0:1:0: [sg0] tag#6999 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.343143][    C1] sd 0:0:1:0: [sg0] tag#6999 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.352922][    C1] sd 0:0:1:0: [sg0] tag#6999 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.362673][    C1] sd 0:0:1:0: [sg0] tag#6999 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.372436][    C1] sd 0:0:1:0: [sg0] tag#6999 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.382183][    C1] sd 0:0:1:0: [sg0] tag#6999 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:09 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  740.391966][    C1] sd 0:0:1:0: [sg0] tag#6999 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.401735][    C1] sd 0:0:1:0: [sg0] tag#6999 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.411544][    C1] sd 0:0:1:0: [sg0] tag#6999 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.421330][    C1] sd 0:0:1:0: [sg0] tag#6999 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.431129][    C1] sd 0:0:1:0: [sg0] tag#6999 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:42:09 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:09 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r0 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:42:09 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:09 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  740.846062][T28263] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:42:10 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  740.946559][    C1] sd 0:0:1:0: [sg0] tag#7002 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  740.956308][    C1] sd 0:0:1:0: [sg0] tag#7002 CDB: Test Unit Ready
[  740.963070][    C1] sd 0:0:1:0: [sg0] tag#7002 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.972344][    C0] sd 0:0:1:0: [sg0] tag#7000 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  740.972874][    C1] sd 0:0:1:0: [sg0] tag#7002 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.982309][    C0] sd 0:0:1:0: [sg0] tag#7000 CDB: Test Unit Ready
[  740.991963][    C1] sd 0:0:1:0: [sg0] tag#7002 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  740.998436][    C0] sd 0:0:1:0: [sg0] tag#7000 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.008094][    C1] sd 0:0:1:0: [sg0] tag#7002 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.017735][    C0] sd 0:0:1:0: [sg0] tag#7000 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.027392][    C1] sd 0:0:1:0: [sg0] tag#7002 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.037024][    C0] sd 0:0:1:0: [sg0] tag#7000 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.046680][    C1] sd 0:0:1:0: [sg0] tag#7002 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.056299][    C0] sd 0:0:1:0: [sg0] tag#7000 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.065970][    C1] sd 0:0:1:0: [sg0] tag#7002 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.075619][    C0] sd 0:0:1:0: [sg0] tag#7000 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.085276][    C1] sd 0:0:1:0: [sg0] tag#7002 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.094902][    C0] sd 0:0:1:0: [sg0] tag#7000 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.104552][    C1] sd 0:0:1:0: [sg0] tag#7002 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.114182][    C0] sd 0:0:1:0: [sg0] tag#7000 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.123862][    C1] sd 0:0:1:0: [sg0] tag#7002 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.133502][    C0] sd 0:0:1:0: [sg0] tag#7000 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.143177][    C1] sd 0:0:1:0: [sg0] tag#7002 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.152798][    C0] sd 0:0:1:0: [sg0] tag#7000 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.162463][    C1] sd 0:0:1:0: [sg0] tag#7002 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.172087][    C0] sd 0:0:1:0: [sg0] tag#7000 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.181763][    C1] sd 0:0:1:0: [sg0] tag#7002 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.191327][    C0] sd 0:0:1:0: [sg0] tag#7000 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.200953][    C1] sd 0:0:1:0: [sg0] tag#7002 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.210583][    C0] sd 0:0:1:0: [sg0] tag#7000 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.220235][    C1] sd 0:0:1:0: [sg0] tag#7002 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  741.229894][    C0] sd 0:0:1:0: [sg0] tag#7000 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:10 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:10 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r0 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

[  741.248171][    C0] sd 0:0:1:0: [sg0] tag#7000 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.257921][    C0] sd 0:0:1:0: [sg0] tag#7000 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  741.266813][    C0] sd 0:0:1:0: [sg0] tag#7001 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  741.276484][    C0] sd 0:0:1:0: [sg0] tag#7001 CDB: Test Unit Ready
[  741.283087][    C0] sd 0:0:1:0: [sg0] tag#7001 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.292849][    C0] sd 0:0:1:0: [sg0] tag#7001 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.302605][    C0] sd 0:0:1:0: [sg0] tag#7001 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.312342][    C0] sd 0:0:1:0: [sg0] tag#7001 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.322105][    C0] sd 0:0:1:0: [sg0] tag#7001 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.331841][    C0] sd 0:0:1:0: [sg0] tag#7001 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.341540][    C0] sd 0:0:1:0: [sg0] tag#7001 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.351310][    C0] sd 0:0:1:0: [sg0] tag#7001 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.361074][    C0] sd 0:0:1:0: [sg0] tag#7001 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.370835][    C0] sd 0:0:1:0: [sg0] tag#7001 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.380581][    C0] sd 0:0:1:0: [sg0] tag#7001 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:10 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=r5], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r6, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  741.390324][    C0] sd 0:0:1:0: [sg0] tag#7001 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.400071][    C0] sd 0:0:1:0: [sg0] tag#7001 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.409802][    C0] sd 0:0:1:0: [sg0] tag#7001 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.419542][    C0] sd 0:0:1:0: [sg0] tag#7001 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:42:10 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  741.561483][    C1] sd 0:0:1:0: [sg0] tag#7003 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  741.571186][    C1] sd 0:0:1:0: [sg0] tag#7003 CDB: Test Unit Ready
[  741.577856][    C1] sd 0:0:1:0: [sg0] tag#7003 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.587627][    C1] sd 0:0:1:0: [sg0] tag#7003 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.597480][    C1] sd 0:0:1:0: [sg0] tag#7003 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.607283][    C1] sd 0:0:1:0: [sg0] tag#7003 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.617097][    C1] sd 0:0:1:0: [sg0] tag#7003 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.621264][T28276] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  741.626843][    C1] sd 0:0:1:0: [sg0] tag#7003 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.644700][    C1] sd 0:0:1:0: [sg0] tag#7003 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.654471][    C1] sd 0:0:1:0: [sg0] tag#7003 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.664310][    C1] sd 0:0:1:0: [sg0] tag#7003 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.674093][    C1] sd 0:0:1:0: [sg0] tag#7003 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.683837][    C1] sd 0:0:1:0: [sg0] tag#7003 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.693609][    C1] sd 0:0:1:0: [sg0] tag#7003 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.703380][    C1] sd 0:0:1:0: [sg0] tag#7003 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.713125][    C1] sd 0:0:1:0: [sg0] tag#7003 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  741.722908][    C1] sd 0:0:1:0: [sg0] tag#7003 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:42:10 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:11 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400", 0x22}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:11 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r0 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:42:11 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  742.003316][T28291] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:42:11 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  742.129114][    C1] sd 0:0:1:0: [sg0] tag#7006 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  742.138763][    C1] sd 0:0:1:0: [sg0] tag#7006 CDB: Test Unit Ready
[  742.145444][    C1] sd 0:0:1:0: [sg0] tag#7006 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  742.155200][    C1] sd 0:0:1:0: [sg0] tag#7006 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  742.164990][    C1] sd 0:0:1:0: [sg0] tag#7006 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  742.174797][    C1] sd 0:0:1:0: [sg0] tag#7006 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  742.184592][    C1] sd 0:0:1:0: [sg0] tag#7006 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  742.194355][    C1] sd 0:0:1:0: [sg0] tag#7006 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  742.204139][    C1] sd 0:0:1:0: [sg0] tag#7006 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  742.213895][    C1] sd 0:0:1:0: [sg0] tag#7006 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  742.223691][    C1] sd 0:0:1:0: [sg0] tag#7006 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  742.233442][    C1] sd 0:0:1:0: [sg0] tag#7006 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  742.243230][    C1] sd 0:0:1:0: [sg0] tag#7006 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  742.253015][    C1] sd 0:0:1:0: [sg0] tag#7006 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  742.262964][    C1] sd 0:0:1:0: [sg0] tag#7006 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  742.272711][    C1] sd 0:0:1:0: [sg0] tag#7006 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  742.282477][    C1] sd 0:0:1:0: [sg0] tag#7006 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:42:11 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:11 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:11 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r2 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r3], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000700))
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:11 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:11 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, 0x0, &(0x7f0000001880))
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

[  742.723465][T28313] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:42:11 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r0 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:42:11 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  742.925218][    C1] sd 0:0:1:0: [sg0] tag#7011 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  742.934883][    C1] sd 0:0:1:0: [sg0] tag#7011 CDB: Test Unit Ready
[  742.937807][    C0] sd 0:0:1:0: [sg0] tag#7004 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  742.941459][    C1] sd 0:0:1:0: [sg0] tag#7011 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  742.950961][    C0] sd 0:0:1:0: [sg0] tag#7004 CDB: Test Unit Ready
[  742.960627][    C1] sd 0:0:1:0: [sg0] tag#7011 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  742.967097][    C0] sd 0:0:1:0: [sg0] tag#7004 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  742.976737][    C1] sd 0:0:1:0: [sg0] tag#7011 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  742.986370][    C0] sd 0:0:1:0: [sg0] tag#7004 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  742.996022][    C1] sd 0:0:1:0: [sg0] tag#7011 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  743.005659][    C0] sd 0:0:1:0: [sg0] tag#7004 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  743.015278][    C1] sd 0:0:1:0: [sg0] tag#7011 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  743.024908][    C0] sd 0:0:1:0: [sg0] tag#7004 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  743.034551][    C1] sd 0:0:1:0: [sg0] tag#7011 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  743.044182][    C0] sd 0:0:1:0: [sg0] tag#7004 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  743.053803][    C1] sd 0:0:1:0: [sg0] tag#7011 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  743.063425][    C0] sd 0:0:1:0: [sg0] tag#7004 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  743.073069][    C1] sd 0:0:1:0: [sg0] tag#7011 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  743.082700][    C0] sd 0:0:1:0: [sg0] tag#7004 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  743.092337][    C1] sd 0:0:1:0: [sg0] tag#7011 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  743.101966][    C0] sd 0:0:1:0: [sg0] tag#7004 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  743.111542][    C1] sd 0:0:1:0: [sg0] tag#7011 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  743.121183][    C0] sd 0:0:1:0: [sg0] tag#7004 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  743.130813][    C1] sd 0:0:1:0: [sg0] tag#7011 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  743.140446][    C0] sd 0:0:1:0: [sg0] tag#7004 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  743.150058][    C1] sd 0:0:1:0: [sg0] tag#7011 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  743.159696][    C0] sd 0:0:1:0: [sg0] tag#7004 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  743.169318][    C1] sd 0:0:1:0: [sg0] tag#7011 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  743.178939][    C0] sd 0:0:1:0: [sg0] tag#7004 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  743.188564][    C1] sd 0:0:1:0: [sg0] tag#7011 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  743.198190][    C0] sd 0:0:1:0: [sg0] tag#7004 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  743.207800][    C1] sd 0:0:1:0: [sg0] tag#7011 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  743.217427][    C0] sd 0:0:1:0: [sg0] tag#7004 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  743.235674][    C0] sd 0:0:1:0: [sg0] tag#7004 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:42:12 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r2 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r3], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000700))
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:12 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, 0x0, &(0x7f0000001880))
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:42:12 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=r5], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r6, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:12 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:12 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r0 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

[  743.736065][T28353] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:42:12 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:12 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, 0x0, &(0x7f0000001880))
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:42:12 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r2 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r3], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000700))
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:12 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r0, r1, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r2 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r3], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000700))
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:13 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=r5], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r6, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:13 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  744.240956][T28375] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:42:13 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r0 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:42:13 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:42:13 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:13 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:13 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:13 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=r5], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r6, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  744.699498][T28394] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:42:13 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:42:13 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:13 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:14 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:14 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=r5], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r6, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:14 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=r5], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r6, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  745.143932][    C0] scsi_io_completion_action: 14 callbacks suppressed
[  745.144031][    C0] sd 0:0:1:0: [sg0] tag#7021 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  745.160447][    C0] sd 0:0:1:0: [sg0] tag#7021 CDB: Test Unit Ready
[  745.167097][    C0] sd 0:0:1:0: [sg0] tag#7021 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.176868][    C0] sd 0:0:1:0: [sg0] tag#7021 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.186638][    C0] sd 0:0:1:0: [sg0] tag#7021 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.196459][    C0] sd 0:0:1:0: [sg0] tag#7021 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.206224][    C0] sd 0:0:1:0: [sg0] tag#7021 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.215984][    C0] sd 0:0:1:0: [sg0] tag#7021 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.225732][    C0] sd 0:0:1:0: [sg0] tag#7021 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.235506][    C0] sd 0:0:1:0: [sg0] tag#7021 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.236387][    C1] sd 0:0:1:0: [sg0] tag#7022 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  745.245281][    C0] sd 0:0:1:0: [sg0] tag#7021 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.254768][    C1] sd 0:0:1:0: [sg0] tag#7022 CDB: Test Unit Ready
[  745.264401][    C0] sd 0:0:1:0: [sg0] tag#7021 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.270847][    C1] sd 0:0:1:0: [sg0] tag#7022 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.280473][    C0] sd 0:0:1:0: [sg0] tag#7021 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.280563][    C0] sd 0:0:1:0: [sg0] tag#7021 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.290221][    C1] sd 0:0:1:0: [sg0] tag#7022 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.299818][    C0] sd 0:0:1:0: [sg0] tag#7021 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.309454][    C1] sd 0:0:1:0: [sg0] tag#7022 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.319086][    C0] sd 0:0:1:0: [sg0] tag#7021 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.328708][    C1] sd 0:0:1:0: [sg0] tag#7022 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.338337][    C0] sd 0:0:1:0: [sg0] tag#7021 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  745.347960][    C1] sd 0:0:1:0: [sg0] tag#7022 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.375809][    C1] sd 0:0:1:0: [sg0] tag#7022 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.385618][    C1] sd 0:0:1:0: [sg0] tag#7022 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.395367][    C1] sd 0:0:1:0: [sg0] tag#7022 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.395493][T28421] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  745.405280][    C1] sd 0:0:1:0: [sg0] tag#7022 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.405367][    C1] sd 0:0:1:0: [sg0] tag#7022 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.405451][    C1] sd 0:0:1:0: [sg0] tag#7022 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:14 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  745.424266][T28422] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  745.432942][    C1] sd 0:0:1:0: [sg0] tag#7022 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.433031][    C1] sd 0:0:1:0: [sg0] tag#7022 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.433120][    C1] sd 0:0:1:0: [sg0] tag#7022 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.433207][    C1] sd 0:0:1:0: [sg0] tag#7022 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  745.526730][    C0] sd 0:0:1:0: [sg0] tag#7023 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  745.536362][    C0] sd 0:0:1:0: [sg0] tag#7023 CDB: Test Unit Ready
[  745.543011][    C0] sd 0:0:1:0: [sg0] tag#7023 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.552777][    C0] sd 0:0:1:0: [sg0] tag#7023 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.562544][    C0] sd 0:0:1:0: [sg0] tag#7023 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:14 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:14 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

[  745.572346][    C0] sd 0:0:1:0: [sg0] tag#7023 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.582113][    C0] sd 0:0:1:0: [sg0] tag#7023 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.591884][    C0] sd 0:0:1:0: [sg0] tag#7023 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.601600][    C0] sd 0:0:1:0: [sg0] tag#7023 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.611357][    C0] sd 0:0:1:0: [sg0] tag#7023 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:14 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  745.621121][    C0] sd 0:0:1:0: [sg0] tag#7023 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.630892][    C0] sd 0:0:1:0: [sg0] tag#7023 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.640672][    C0] sd 0:0:1:0: [sg0] tag#7023 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.650442][    C0] sd 0:0:1:0: [sg0] tag#7023 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.660218][    C0] sd 0:0:1:0: [sg0] tag#7023 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.669972][    C0] sd 0:0:1:0: [sg0] tag#7023 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.679748][    C0] sd 0:0:1:0: [sg0] tag#7023 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  745.683550][    C1] sd 0:0:1:0: [sg0] tag#7024 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  745.697907][    C1] sd 0:0:1:0: [sg0] tag#7024 CDB: Test Unit Ready
[  745.704546][    C1] sd 0:0:1:0: [sg0] tag#7024 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.714270][    C1] sd 0:0:1:0: [sg0] tag#7024 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.724040][    C1] sd 0:0:1:0: [sg0] tag#7024 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.733816][    C1] sd 0:0:1:0: [sg0] tag#7024 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.743594][    C1] sd 0:0:1:0: [sg0] tag#7024 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.753331][    C1] sd 0:0:1:0: [sg0] tag#7024 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.763109][    C1] sd 0:0:1:0: [sg0] tag#7024 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.772855][    C1] sd 0:0:1:0: [sg0] tag#7024 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.782619][    C1] sd 0:0:1:0: [sg0] tag#7024 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.792354][    C1] sd 0:0:1:0: [sg0] tag#7024 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.802108][    C1] sd 0:0:1:0: [sg0] tag#7024 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.809734][    C0] sd 0:0:1:0: [sg0] tag#7025 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  745.811862][    C1] sd 0:0:1:0: [sg0] tag#7024 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.821302][    C0] sd 0:0:1:0: [sg0] tag#7025 CDB: Test Unit Ready
[  745.830839][    C1] sd 0:0:1:0: [sg0] tag#7024 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.837345][    C0] sd 0:0:1:0: [sg0] tag#7025 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.847003][    C1] sd 0:0:1:0: [sg0] tag#7024 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.856638][    C0] sd 0:0:1:0: [sg0] tag#7025 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.866298][    C1] sd 0:0:1:0: [sg0] tag#7024 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  745.875947][    C0] sd 0:0:1:0: [sg0] tag#7025 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.894215][    C0] sd 0:0:1:0: [sg0] tag#7025 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.903972][    C0] sd 0:0:1:0: [sg0] tag#7025 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.913719][    C0] sd 0:0:1:0: [sg0] tag#7025 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.923459][    C0] sd 0:0:1:0: [sg0] tag#7025 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.933209][    C0] sd 0:0:1:0: [sg0] tag#7025 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.942953][    C0] sd 0:0:1:0: [sg0] tag#7025 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.952745][    C0] sd 0:0:1:0: [sg0] tag#7025 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.962496][    C0] sd 0:0:1:0: [sg0] tag#7025 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.972251][    C0] sd 0:0:1:0: [sg0] tag#7025 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.982001][    C0] sd 0:0:1:0: [sg0] tag#7025 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  745.991697][    C0] sd 0:0:1:0: [sg0] tag#7025 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  746.001476][    C0] sd 0:0:1:0: [sg0] tag#7025 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:42:15 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=r5], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r6, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:15 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(0x0, 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:15 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:42:15 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:15 executing program 0:
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  746.403992][T28445] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:42:15 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:42:15 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

[  746.624219][    C1] sd 0:0:1:0: [sg0] tag#7028 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  746.633960][    C1] sd 0:0:1:0: [sg0] tag#7028 CDB: Test Unit Ready
[  746.640609][    C1] sd 0:0:1:0: [sg0] tag#7028 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  746.650471][    C1] sd 0:0:1:0: [sg0] tag#7028 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  746.659224][    C0] sd 0:0:1:0: [sg0] tag#7026 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  746.660275][    C1] sd 0:0:1:0: [sg0] tag#7028 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  746.669720][    C0] sd 0:0:1:0: [sg0] tag#7026 CDB: Test Unit Ready
[  746.679392][    C1] sd 0:0:1:0: [sg0] tag#7028 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  746.685896][    C0] sd 0:0:1:0: [sg0] tag#7026 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  746.695553][    C1] sd 0:0:1:0: [sg0] tag#7028 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  746.705177][    C0] sd 0:0:1:0: [sg0] tag#7026 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  746.714826][    C1] sd 0:0:1:0: [sg0] tag#7028 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  746.724459][    C0] sd 0:0:1:0: [sg0] tag#7026 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  746.734110][    C1] sd 0:0:1:0: [sg0] tag#7028 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  746.743738][    C0] sd 0:0:1:0: [sg0] tag#7026 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  746.753391][    C1] sd 0:0:1:0: [sg0] tag#7028 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  746.763008][    C0] sd 0:0:1:0: [sg0] tag#7026 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  746.772677][    C1] sd 0:0:1:0: [sg0] tag#7028 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  746.782307][    C0] sd 0:0:1:0: [sg0] tag#7026 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  746.791979][    C1] sd 0:0:1:0: [sg0] tag#7028 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  746.801576][    C0] sd 0:0:1:0: [sg0] tag#7026 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  746.811245][    C1] sd 0:0:1:0: [sg0] tag#7028 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  746.820869][    C0] sd 0:0:1:0: [sg0] tag#7026 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  746.830526][    C1] sd 0:0:1:0: [sg0] tag#7028 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  746.840148][    C0] sd 0:0:1:0: [sg0] tag#7026 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  746.849801][    C1] sd 0:0:1:0: [sg0] tag#7028 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  746.859439][    C0] sd 0:0:1:0: [sg0] tag#7026 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  746.869094][    C1] sd 0:0:1:0: [sg0] tag#7028 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  746.878716][    C0] sd 0:0:1:0: [sg0] tag#7026 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  746.888375][    C1] sd 0:0:1:0: [sg0] tag#7028 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  746.898021][    C0] sd 0:0:1:0: [sg0] tag#7026 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:15 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=r5], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r6, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:15 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(0x0, 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  746.916364][    C0] sd 0:0:1:0: [sg0] tag#7026 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  746.926136][    C0] sd 0:0:1:0: [sg0] tag#7026 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  746.935874][    C0] sd 0:0:1:0: [sg0] tag#7026 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  746.944709][    C0] sd 0:0:1:0: [sg0] tag#7027 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  746.954308][    C0] sd 0:0:1:0: [sg0] tag#7027 CDB: Test Unit Ready
[  746.960900][    C0] sd 0:0:1:0: [sg0] tag#7027 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  746.970762][    C0] sd 0:0:1:0: [sg0] tag#7027 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  746.980555][    C0] sd 0:0:1:0: [sg0] tag#7027 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  746.990310][    C0] sd 0:0:1:0: [sg0] tag#7027 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.000090][    C0] sd 0:0:1:0: [sg0] tag#7027 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.009842][    C0] sd 0:0:1:0: [sg0] tag#7027 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.019691][    C0] sd 0:0:1:0: [sg0] tag#7027 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.029460][    C0] sd 0:0:1:0: [sg0] tag#7027 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.039244][    C0] sd 0:0:1:0: [sg0] tag#7027 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.049009][    C0] sd 0:0:1:0: [sg0] tag#7027 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.058792][    C0] sd 0:0:1:0: [sg0] tag#7027 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.068525][    C0] sd 0:0:1:0: [sg0] tag#7027 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.078323][    C0] sd 0:0:1:0: [sg0] tag#7027 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.088070][    C0] sd 0:0:1:0: [sg0] tag#7027 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.097883][    C0] sd 0:0:1:0: [sg0] tag#7027 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:42:16 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:16 executing program 0:
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:16 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

[  747.349688][T28475] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  747.437447][    C0] sd 0:0:1:0: [sg0] tag#7029 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  747.447128][    C0] sd 0:0:1:0: [sg0] tag#7029 CDB: Test Unit Ready
[  747.453814][    C0] sd 0:0:1:0: [sg0] tag#7029 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.462315][    C1] sd 0:0:1:0: [sg0] tag#7030 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  747.463576][    C0] sd 0:0:1:0: [sg0] tag#7029 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.473077][    C1] sd 0:0:1:0: [sg0] tag#7030 CDB: Test Unit Ready
[  747.482773][    C0] sd 0:0:1:0: [sg0] tag#7029 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.489170][    C1] sd 0:0:1:0: [sg0] tag#7030 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.498838][    C0] sd 0:0:1:0: [sg0] tag#7029 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.508516][    C1] sd 0:0:1:0: [sg0] tag#7030 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.518112][    C0] sd 0:0:1:0: [sg0] tag#7029 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.527734][    C1] sd 0:0:1:0: [sg0] tag#7030 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.537361][    C0] sd 0:0:1:0: [sg0] tag#7029 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.546985][    C1] sd 0:0:1:0: [sg0] tag#7030 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.556614][    C0] sd 0:0:1:0: [sg0] tag#7029 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.566250][    C1] sd 0:0:1:0: [sg0] tag#7030 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.575878][    C0] sd 0:0:1:0: [sg0] tag#7029 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.585503][    C1] sd 0:0:1:0: [sg0] tag#7030 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.595133][    C0] sd 0:0:1:0: [sg0] tag#7029 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.604758][    C1] sd 0:0:1:0: [sg0] tag#7030 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.614390][    C0] sd 0:0:1:0: [sg0] tag#7029 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.624015][    C1] sd 0:0:1:0: [sg0] tag#7030 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.633648][    C0] sd 0:0:1:0: [sg0] tag#7029 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.643265][    C1] sd 0:0:1:0: [sg0] tag#7030 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.652899][    C0] sd 0:0:1:0: [sg0] tag#7029 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.662524][    C1] sd 0:0:1:0: [sg0] tag#7030 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.672172][    C0] sd 0:0:1:0: [sg0] tag#7029 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.681791][    C1] sd 0:0:1:0: [sg0] tag#7030 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.691387][    C0] sd 0:0:1:0: [sg0] tag#7029 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.700970][    C1] sd 0:0:1:0: [sg0] tag#7030 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.710602][    C0] sd 0:0:1:0: [sg0] tag#7029 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  747.720219][    C1] sd 0:0:1:0: [sg0] tag#7030 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:16 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(0x0, 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:16 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(0x0, 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  747.738455][    C1] sd 0:0:1:0: [sg0] tag#7030 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  747.748259][    C1] sd 0:0:1:0: [sg0] tag#7030 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:42:17 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:17 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:42:17 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=r5], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r6, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:17 executing program 0:
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:17 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:17 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=r5], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r6, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  748.335918][T28509] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  748.510851][T28521] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
09:42:17 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
readv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(0xffffffffffffffff, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:17 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=r5], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r6, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:17 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x0, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:42:17 executing program 0:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:17 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  748.886153][T28540] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:42:18 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
readv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(0xffffffffffffffff, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:18 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:18 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x0, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:42:18 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=r5], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r6, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:18 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:18 executing program 0:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:18 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
readv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(0xffffffffffffffff, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  749.408069][T28557] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:42:18 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
sendmsg(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r4 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r4, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r4, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:18 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x0, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:42:18 executing program 0:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:18 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:18 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:18 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(0x0, 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:42:19 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
sendmsg(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r4 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r4, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r4, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:19 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:19 executing program 0:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:19 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  750.227098][    C1] scsi_io_completion_action: 12 callbacks suppressed
[  750.227200][    C1] sd 0:0:1:0: [sg0] tag#6979 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  750.239336][    C0] sd 0:0:1:0: [sg0] tag#6980 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  750.243676][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB: Test Unit Ready
[  750.253148][    C0] sd 0:0:1:0: [sg0] tag#6980 CDB: Test Unit Ready
[  750.259610][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  750.266133][    C0] sd 0:0:1:0: [sg0] tag#6980 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  750.275789][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  750.285469][    C0] sd 0:0:1:0: [sg0] tag#6980 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  750.295016][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  750.304705][    C0] sd 0:0:1:0: [sg0] tag#6980 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  750.314339][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  750.323983][    C0] sd 0:0:1:0: [sg0] tag#6980 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  750.333613][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  750.343237][    C0] sd 0:0:1:0: [sg0] tag#6980 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  750.352860][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  750.362522][    C0] sd 0:0:1:0: [sg0] tag#6980 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  750.372142][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  750.381787][    C0] sd 0:0:1:0: [sg0] tag#6980 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  750.391356][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  750.400953][    C0] sd 0:0:1:0: [sg0] tag#6980 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  750.410571][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  750.420201][    C0] sd 0:0:1:0: [sg0] tag#6980 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  750.429823][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  750.439458][    C0] sd 0:0:1:0: [sg0] tag#6980 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  750.449081][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  750.458735][    C0] sd 0:0:1:0: [sg0] tag#6980 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  750.468554][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  750.478203][    C0] sd 0:0:1:0: [sg0] tag#6980 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  750.487828][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  750.497464][    C0] sd 0:0:1:0: [sg0] tag#6980 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  750.507092][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:19 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(0x0, 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

[  750.516720][    C0] sd 0:0:1:0: [sg0] tag#6980 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  750.526346][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  750.535984][    C0] sd 0:0:1:0: [sg0] tag#6980 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  750.568055][T28595] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:42:19 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r0 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
r4 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r4, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r4, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:19 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:19 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
sendmsg(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r4 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r4, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r4, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:19 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:19 executing program 0:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:19 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(0x0, 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

[  751.014006][    C1] sd 0:0:1:0: [sg0] tag#6982 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  751.023667][    C1] sd 0:0:1:0: [sg0] tag#6982 CDB: Test Unit Ready
[  751.030238][    C1] sd 0:0:1:0: [sg0] tag#6982 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.040024][    C1] sd 0:0:1:0: [sg0] tag#6982 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.049777][    C1] sd 0:0:1:0: [sg0] tag#6982 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.059656][    C1] sd 0:0:1:0: [sg0] tag#6982 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.069401][    C1] sd 0:0:1:0: [sg0] tag#6982 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.079150][    C1] sd 0:0:1:0: [sg0] tag#6982 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.088939][    C1] sd 0:0:1:0: [sg0] tag#6982 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.095988][T28626] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  751.098668][    C1] sd 0:0:1:0: [sg0] tag#6982 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.116464][    C1] sd 0:0:1:0: [sg0] tag#6982 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.126286][    C1] sd 0:0:1:0: [sg0] tag#6982 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.136052][    C1] sd 0:0:1:0: [sg0] tag#6982 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.143658][    C0] sd 0:0:1:0: [sg0] tag#6981 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  751.145829][    C1] sd 0:0:1:0: [sg0] tag#6982 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.155205][    C0] sd 0:0:1:0: [sg0] tag#6981 CDB: Test Unit Ready
[  751.164833][    C1] sd 0:0:1:0: [sg0] tag#6982 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.171298][    C0] sd 0:0:1:0: [sg0] tag#6981 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.181393][    C1] sd 0:0:1:0: [sg0] tag#6982 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.191024][    C0] sd 0:0:1:0: [sg0] tag#6981 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:20 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x0, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

[  751.200651][    C1] sd 0:0:1:0: [sg0] tag#6982 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  751.210280][    C0] sd 0:0:1:0: [sg0] tag#6981 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.228520][    C0] sd 0:0:1:0: [sg0] tag#6981 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.238299][    C0] sd 0:0:1:0: [sg0] tag#6981 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.248073][    C0] sd 0:0:1:0: [sg0] tag#6981 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.257851][    C0] sd 0:0:1:0: [sg0] tag#6981 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.267644][    C0] sd 0:0:1:0: [sg0] tag#6981 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.277415][    C0] sd 0:0:1:0: [sg0] tag#6981 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.287181][    C0] sd 0:0:1:0: [sg0] tag#6981 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.296952][    C0] sd 0:0:1:0: [sg0] tag#6981 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.306726][    C0] sd 0:0:1:0: [sg0] tag#6981 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.316523][    C0] sd 0:0:1:0: [sg0] tag#6981 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.326305][    C0] sd 0:0:1:0: [sg0] tag#6981 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.336067][    C0] sd 0:0:1:0: [sg0] tag#6981 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  751.344893][    C0] sd 0:0:1:0: [sg0] tag#6983 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  751.354482][    C0] sd 0:0:1:0: [sg0] tag#6983 CDB: Test Unit Ready
[  751.361061][    C0] sd 0:0:1:0: [sg0] tag#6983 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.370843][    C0] sd 0:0:1:0: [sg0] tag#6983 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.380624][    C0] sd 0:0:1:0: [sg0] tag#6983 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.390406][    C0] sd 0:0:1:0: [sg0] tag#6983 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.400189][    C0] sd 0:0:1:0: [sg0] tag#6983 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.409970][    C0] sd 0:0:1:0: [sg0] tag#6983 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.419741][    C0] sd 0:0:1:0: [sg0] tag#6983 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.429528][    C0] sd 0:0:1:0: [sg0] tag#6983 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.439287][    C0] sd 0:0:1:0: [sg0] tag#6983 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.449052][    C0] sd 0:0:1:0: [sg0] tag#6983 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:20 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x0, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

[  751.458847][    C0] sd 0:0:1:0: [sg0] tag#6983 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.468619][    C0] sd 0:0:1:0: [sg0] tag#6983 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.478403][    C0] sd 0:0:1:0: [sg0] tag#6983 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.488296][    C0] sd 0:0:1:0: [sg0] tag#6983 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.490351][    C1] sd 0:0:1:0: [sg0] tag#6984 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  751.498044][    C0] sd 0:0:1:0: [sg0] tag#6983 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  751.507504][    C1] sd 0:0:1:0: [sg0] tag#6984 CDB: Test Unit Ready
[  751.522648][    C1] sd 0:0:1:0: [sg0] tag#6984 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.532396][    C1] sd 0:0:1:0: [sg0] tag#6984 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.542170][    C1] sd 0:0:1:0: [sg0] tag#6984 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.551948][    C1] sd 0:0:1:0: [sg0] tag#6984 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.561736][    C1] sd 0:0:1:0: [sg0] tag#6984 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.571518][    C1] sd 0:0:1:0: [sg0] tag#6984 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.581263][    C1] sd 0:0:1:0: [sg0] tag#6984 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.591059][    C1] sd 0:0:1:0: [sg0] tag#6984 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.600814][    C1] sd 0:0:1:0: [sg0] tag#6984 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.610601][    C1] sd 0:0:1:0: [sg0] tag#6984 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.620357][    C1] sd 0:0:1:0: [sg0] tag#6984 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.630163][    C1] sd 0:0:1:0: [sg0] tag#6984 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.639926][    C1] sd 0:0:1:0: [sg0] tag#6984 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.649740][    C1] sd 0:0:1:0: [sg0] tag#6984 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  751.659495][    C1] sd 0:0:1:0: [sg0] tag#6984 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:42:20 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x0, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:42:20 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r0 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
r4 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r4, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r4, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:20 executing program 0:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:20 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:20 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0), 0x0, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:21 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  752.135177][    C1] sd 0:0:1:0: [sg0] tag#6985 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  752.144817][    C1] sd 0:0:1:0: [sg0] tag#6985 CDB: Test Unit Ready
[  752.151437][    C1] sd 0:0:1:0: [sg0] tag#6985 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.161173][    C1] sd 0:0:1:0: [sg0] tag#6985 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.170957][    C1] sd 0:0:1:0: [sg0] tag#6985 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.180813][    C1] sd 0:0:1:0: [sg0] tag#6985 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.190607][    C1] sd 0:0:1:0: [sg0] tag#6985 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.200507][    C1] sd 0:0:1:0: [sg0] tag#6985 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.210376][    C1] sd 0:0:1:0: [sg0] tag#6985 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.220174][    C1] sd 0:0:1:0: [sg0] tag#6985 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.229926][    C1] sd 0:0:1:0: [sg0] tag#6985 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.239744][    C1] sd 0:0:1:0: [sg0] tag#6985 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.249488][    C1] sd 0:0:1:0: [sg0] tag#6985 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.259257][    C1] sd 0:0:1:0: [sg0] tag#6985 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.269048][    C1] sd 0:0:1:0: [sg0] tag#6985 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:21 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

[  752.278811][    C1] sd 0:0:1:0: [sg0] tag#6985 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.288598][    C1] sd 0:0:1:0: [sg0] tag#6985 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  752.291290][T28654] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  752.384652][T28656] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  752.407043][    C0] sd 0:0:1:0: [sg0] tag#6986 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  752.416810][    C0] sd 0:0:1:0: [sg0] tag#6986 CDB: Test Unit Ready
[  752.423491][    C0] sd 0:0:1:0: [sg0] tag#6986 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.433290][    C0] sd 0:0:1:0: [sg0] tag#6986 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.443108][    C0] sd 0:0:1:0: [sg0] tag#6986 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.446634][    C1] sd 0:0:1:0: [sg0] tag#6987 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  752.452931][    C0] sd 0:0:1:0: [sg0] tag#6986 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.462536][    C1] sd 0:0:1:0: [sg0] tag#6987 CDB: Test Unit Ready
[  752.472204][    C0] sd 0:0:1:0: [sg0] tag#6986 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.478648][    C1] sd 0:0:1:0: [sg0] tag#6987 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.488289][    C0] sd 0:0:1:0: [sg0] tag#6986 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.497950][    C1] sd 0:0:1:0: [sg0] tag#6987 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.507549][    C0] sd 0:0:1:0: [sg0] tag#6986 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.517173][    C1] sd 0:0:1:0: [sg0] tag#6987 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.526806][    C0] sd 0:0:1:0: [sg0] tag#6986 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.536426][    C1] sd 0:0:1:0: [sg0] tag#6987 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.546060][    C0] sd 0:0:1:0: [sg0] tag#6986 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.555673][    C1] sd 0:0:1:0: [sg0] tag#6987 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.565304][    C0] sd 0:0:1:0: [sg0] tag#6986 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.575045][    C1] sd 0:0:1:0: [sg0] tag#6987 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.584674][    C0] sd 0:0:1:0: [sg0] tag#6986 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.594299][    C1] sd 0:0:1:0: [sg0] tag#6987 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.603930][    C0] sd 0:0:1:0: [sg0] tag#6986 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.613546][    C1] sd 0:0:1:0: [sg0] tag#6987 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.623169][    C0] sd 0:0:1:0: [sg0] tag#6986 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.632797][    C1] sd 0:0:1:0: [sg0] tag#6987 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.642430][    C0] sd 0:0:1:0: [sg0] tag#6986 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.652051][    C1] sd 0:0:1:0: [sg0] tag#6987 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.661782][    C0] sd 0:0:1:0: [sg0] tag#6986 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:42:21 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r0 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
r4 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r4, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r4, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:21 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0), 0x0, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  752.671349][    C1] sd 0:0:1:0: [sg0] tag#6987 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.689544][    C1] sd 0:0:1:0: [sg0] tag#6987 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.699348][    C1] sd 0:0:1:0: [sg0] tag#6987 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.709108][    C1] sd 0:0:1:0: [sg0] tag#6987 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  752.718885][    C1] sd 0:0:1:0: [sg0] tag#6987 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:42:21 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:21 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:42:21 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x0, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  752.976730][T28656] vivid-003: kernel_thread() failed
[  753.089989][T28682] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:42:22 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:42:22 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:22 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  753.300837][    C1] sd 0:0:1:0: [sg0] tag#6988 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  753.310535][    C1] sd 0:0:1:0: [sg0] tag#6988 CDB: Test Unit Ready
[  753.317420][    C1] sd 0:0:1:0: [sg0] tag#6988 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  753.327253][    C1] sd 0:0:1:0: [sg0] tag#6988 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  753.337097][    C1] sd 0:0:1:0: [sg0] tag#6988 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  753.346993][    C1] sd 0:0:1:0: [sg0] tag#6988 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  753.356841][    C1] sd 0:0:1:0: [sg0] tag#6988 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  753.366723][    C1] sd 0:0:1:0: [sg0] tag#6988 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  753.376585][    C1] sd 0:0:1:0: [sg0] tag#6988 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  753.386408][    C1] sd 0:0:1:0: [sg0] tag#6988 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  753.396258][    C1] sd 0:0:1:0: [sg0] tag#6988 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  753.406102][    C1] sd 0:0:1:0: [sg0] tag#6988 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  753.415949][    C1] sd 0:0:1:0: [sg0] tag#6988 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  753.425798][    C1] sd 0:0:1:0: [sg0] tag#6988 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  753.435615][    C1] sd 0:0:1:0: [sg0] tag#6988 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:22 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0), 0x0, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:22 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  753.445491][    C1] sd 0:0:1:0: [sg0] tag#6988 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  753.455335][    C1] sd 0:0:1:0: [sg0] tag#6988 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:42:22 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x0, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:22 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, 0x0, 0x0)

[  753.688870][T28697] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
09:42:22 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:23 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  753.898656][T28709] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:42:23 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:23 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r0 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
r4 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r4, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r4, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:23 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, 0x0, 0x0)

09:42:23 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x0, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:23 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  754.365678][T28733] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:42:23 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:23 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, 0x0, 0x0)

09:42:23 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x0, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:42:23 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:23 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:23 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0), 0x0)

09:42:23 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:23 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:42:24 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:24 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:24 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  755.118057][T28767] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:42:24 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0), 0x0)

[  755.261940][    C1] scsi_io_completion_action: 12 callbacks suppressed
[  755.262049][    C1] sd 0:0:1:0: [sg0] tag#7001 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  755.278705][    C1] sd 0:0:1:0: [sg0] tag#7001 CDB: Test Unit Ready
[  755.285345][    C1] sd 0:0:1:0: [sg0] tag#7001 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.295121][    C1] sd 0:0:1:0: [sg0] tag#7001 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.304890][    C1] sd 0:0:1:0: [sg0] tag#7001 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.314687][    C1] sd 0:0:1:0: [sg0] tag#7001 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.324452][    C1] sd 0:0:1:0: [sg0] tag#7001 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.334230][    C1] sd 0:0:1:0: [sg0] tag#7001 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.344007][    C1] sd 0:0:1:0: [sg0] tag#7001 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.353780][    C1] sd 0:0:1:0: [sg0] tag#7001 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.363563][    C1] sd 0:0:1:0: [sg0] tag#7001 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.373333][    C1] sd 0:0:1:0: [sg0] tag#7001 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.383110][    C1] sd 0:0:1:0: [sg0] tag#7001 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.392942][    C1] sd 0:0:1:0: [sg0] tag#7001 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.402726][    C1] sd 0:0:1:0: [sg0] tag#7001 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:24 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0), 0x0)

[  755.412543][    C1] sd 0:0:1:0: [sg0] tag#7001 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.422303][    C1] sd 0:0:1:0: [sg0] tag#7001 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:42:24 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:24 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:24 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  755.687326][    C0] sd 0:0:1:0: [sg0] tag#7002 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  755.697095][    C0] sd 0:0:1:0: [sg0] tag#7002 CDB: Test Unit Ready
[  755.703808][    C0] sd 0:0:1:0: [sg0] tag#7002 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.713617][    C0] sd 0:0:1:0: [sg0] tag#7002 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.723410][    C0] sd 0:0:1:0: [sg0] tag#7002 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.733206][    C0] sd 0:0:1:0: [sg0] tag#7002 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.743002][    C0] sd 0:0:1:0: [sg0] tag#7002 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.752802][    C0] sd 0:0:1:0: [sg0] tag#7002 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.762626][    C0] sd 0:0:1:0: [sg0] tag#7002 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.772412][    C0] sd 0:0:1:0: [sg0] tag#7002 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.775885][    C1] sd 0:0:1:0: [sg0] tag#7003 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  755.782266][    C0] sd 0:0:1:0: [sg0] tag#7002 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.791690][    C1] sd 0:0:1:0: [sg0] tag#7003 CDB: Test Unit Ready
[  755.801336][    C0] sd 0:0:1:0: [sg0] tag#7002 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.807830][    C1] sd 0:0:1:0: [sg0] tag#7003 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.817460][    C0] sd 0:0:1:0: [sg0] tag#7002 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.827128][    C1] sd 0:0:1:0: [sg0] tag#7003 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.836735][    C0] sd 0:0:1:0: [sg0] tag#7002 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.846362][    C1] sd 0:0:1:0: [sg0] tag#7003 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.855991][    C0] sd 0:0:1:0: [sg0] tag#7002 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.865619][    C1] sd 0:0:1:0: [sg0] tag#7003 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.875248][    C0] sd 0:0:1:0: [sg0] tag#7002 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.884873][    C1] sd 0:0:1:0: [sg0] tag#7003 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.894509][    C0] sd 0:0:1:0: [sg0] tag#7002 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  755.904130][    C1] sd 0:0:1:0: [sg0] tag#7003 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.922367][    C1] sd 0:0:1:0: [sg0] tag#7003 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:25 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  755.932198][    C1] sd 0:0:1:0: [sg0] tag#7003 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.941978][    C1] sd 0:0:1:0: [sg0] tag#7003 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.951698][    C1] sd 0:0:1:0: [sg0] tag#7003 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.961592][    C1] sd 0:0:1:0: [sg0] tag#7003 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.971402][    C1] sd 0:0:1:0: [sg0] tag#7003 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.981213][    C1] sd 0:0:1:0: [sg0] tag#7003 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  755.991074][    C1] sd 0:0:1:0: [sg0] tag#7003 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  756.000893][    C1] sd 0:0:1:0: [sg0] tag#7003 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:42:25 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{0x0}], 0x1)

09:42:25 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:25 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  756.276676][    C0] sd 0:0:1:0: [sg0] tag#7004 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  756.286342][    C0] sd 0:0:1:0: [sg0] tag#7004 CDB: Test Unit Ready
[  756.293017][    C0] sd 0:0:1:0: [sg0] tag#7004 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  756.302819][    C0] sd 0:0:1:0: [sg0] tag#7004 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  756.312611][    C0] sd 0:0:1:0: [sg0] tag#7004 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:25 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{0x0}], 0x1)

[  756.322442][    C0] sd 0:0:1:0: [sg0] tag#7004 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  756.332231][    C0] sd 0:0:1:0: [sg0] tag#7004 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  756.342028][    C0] sd 0:0:1:0: [sg0] tag#7004 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  756.351821][    C0] sd 0:0:1:0: [sg0] tag#7004 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  756.361534][    C0] sd 0:0:1:0: [sg0] tag#7004 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:25 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

[  756.371472][    C0] sd 0:0:1:0: [sg0] tag#7004 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  756.381241][    C0] sd 0:0:1:0: [sg0] tag#7004 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  756.381591][T28810] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  756.391051][    C0] sd 0:0:1:0: [sg0] tag#7004 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  756.391136][    C0] sd 0:0:1:0: [sg0] tag#7004 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  756.391224][    C0] sd 0:0:1:0: [sg0] tag#7004 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  756.428496][    C0] sd 0:0:1:0: [sg0] tag#7004 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  756.438313][    C0] sd 0:0:1:0: [sg0] tag#7004 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:42:25 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:25 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  756.569014][    C1] sd 0:0:1:0: [sg0] tag#7005 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  756.578780][    C1] sd 0:0:1:0: [sg0] tag#7005 CDB: Test Unit Ready
[  756.585469][    C1] sd 0:0:1:0: [sg0] tag#7005 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  756.595238][    C1] sd 0:0:1:0: [sg0] tag#7005 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  756.605008][    C1] sd 0:0:1:0: [sg0] tag#7005 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  756.614821][    C1] sd 0:0:1:0: [sg0] tag#7005 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  756.624571][    C1] sd 0:0:1:0: [sg0] tag#7005 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  756.634321][    C1] sd 0:0:1:0: [sg0] tag#7005 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  756.644072][    C1] sd 0:0:1:0: [sg0] tag#7005 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  756.653821][    C1] sd 0:0:1:0: [sg0] tag#7005 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  756.663593][    C1] sd 0:0:1:0: [sg0] tag#7005 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  756.673354][    C1] sd 0:0:1:0: [sg0] tag#7005 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  756.683116][    C1] sd 0:0:1:0: [sg0] tag#7005 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  756.692884][    C1] sd 0:0:1:0: [sg0] tag#7005 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  756.702675][    C1] sd 0:0:1:0: [sg0] tag#7005 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  756.712414][    C1] sd 0:0:1:0: [sg0] tag#7005 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  756.722175][    C1] sd 0:0:1:0: [sg0] tag#7005 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:42:25 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:25 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{0x0}], 0x1)

09:42:25 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  756.871306][    C0] sd 0:0:1:0: [sg0] tag#7006 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  756.880968][    C0] sd 0:0:1:0: [sg0] tag#7006 CDB: Test Unit Ready
[  756.887687][    C0] sd 0:0:1:0: [sg0] tag#7006 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  756.897485][    C0] sd 0:0:1:0: [sg0] tag#7006 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  756.907329][    C0] sd 0:0:1:0: [sg0] tag#7006 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:26 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

[  756.917143][    C0] sd 0:0:1:0: [sg0] tag#7006 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  756.926934][    C0] sd 0:0:1:0: [sg0] tag#7006 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  756.936735][    C0] sd 0:0:1:0: [sg0] tag#7006 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  756.946522][    C0] sd 0:0:1:0: [sg0] tag#7006 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  756.956313][    C0] sd 0:0:1:0: [sg0] tag#7006 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:26 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  756.966092][    C0] sd 0:0:1:0: [sg0] tag#7006 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  756.975888][    C0] sd 0:0:1:0: [sg0] tag#7006 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  756.985713][    C0] sd 0:0:1:0: [sg0] tag#7006 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  756.995450][    C0] sd 0:0:1:0: [sg0] tag#7006 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  757.005223][    C0] sd 0:0:1:0: [sg0] tag#7006 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  757.015035][    C0] sd 0:0:1:0: [sg0] tag#7006 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  757.024789][    C0] sd 0:0:1:0: [sg0] tag#7006 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  757.186085][T28832] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  757.236185][    C0] sd 0:0:1:0: [sg0] tag#7007 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  757.245894][    C0] sd 0:0:1:0: [sg0] tag#7007 CDB: Test Unit Ready
[  757.252578][    C0] sd 0:0:1:0: [sg0] tag#7007 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  757.262365][    C0] sd 0:0:1:0: [sg0] tag#7007 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  757.272152][    C0] sd 0:0:1:0: [sg0] tag#7007 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  757.280071][    C1] sd 0:0:1:0: [sg0] tag#7008 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  757.281959][    C0] sd 0:0:1:0: [sg0] tag#7007 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  757.291343][    C1] sd 0:0:1:0: [sg0] tag#7008 CDB: Test Unit Ready
[  757.301010][    C0] sd 0:0:1:0: [sg0] tag#7007 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  757.307526][    C1] sd 0:0:1:0: [sg0] tag#7008 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  757.317186][    C0] sd 0:0:1:0: [sg0] tag#7007 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  757.326857][    C1] sd 0:0:1:0: [sg0] tag#7008 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  757.336448][    C0] sd 0:0:1:0: [sg0] tag#7007 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  757.346066][    C1] sd 0:0:1:0: [sg0] tag#7008 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  757.355713][    C0] sd 0:0:1:0: [sg0] tag#7007 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  757.365334][    C1] sd 0:0:1:0: [sg0] tag#7008 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  757.374969][    C0] sd 0:0:1:0: [sg0] tag#7007 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  757.384680][    C1] sd 0:0:1:0: [sg0] tag#7008 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  757.394318][    C0] sd 0:0:1:0: [sg0] tag#7007 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  757.403935][    C1] sd 0:0:1:0: [sg0] tag#7008 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  757.413582][    C0] sd 0:0:1:0: [sg0] tag#7007 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  757.423198][    C1] sd 0:0:1:0: [sg0] tag#7008 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  757.432934][    C0] sd 0:0:1:0: [sg0] tag#7007 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  757.442573][    C1] sd 0:0:1:0: [sg0] tag#7008 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  757.452222][    C0] sd 0:0:1:0: [sg0] tag#7007 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  757.461921][    C1] sd 0:0:1:0: [sg0] tag#7008 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  757.471522][    C0] sd 0:0:1:0: [sg0] tag#7007 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  757.481200][    C1] sd 0:0:1:0: [sg0] tag#7008 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  757.490840][    C0] sd 0:0:1:0: [sg0] tag#7007 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  757.500491][    C1] sd 0:0:1:0: [sg0] tag#7008 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  757.518738][    C1] sd 0:0:1:0: [sg0] tag#7008 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  757.528554][    C1] sd 0:0:1:0: [sg0] tag#7008 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  757.538293][    C1] sd 0:0:1:0: [sg0] tag#7008 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  757.548068][    C1] sd 0:0:1:0: [sg0] tag#7008 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:42:26 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{0x0}], 0x1)

09:42:26 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x38, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}]}, 0x38}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:26 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
r4 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r4, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r4, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:26 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  757.904214][T28852] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  757.931329][    C1] sd 0:0:1:0: [sg0] tag#7009 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  757.941336][    C1] sd 0:0:1:0: [sg0] tag#7009 CDB: Test Unit Ready
[  757.942165][    C0] sd 0:0:1:0: [sg0] tag#7010 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  757.947992][    C1] sd 0:0:1:0: [sg0] tag#7009 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  757.957426][    C0] sd 0:0:1:0: [sg0] tag#7010 CDB: Test Unit Ready
[  757.967040][    C1] sd 0:0:1:0: [sg0] tag#7009 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  757.973583][    C0] sd 0:0:1:0: [sg0] tag#7010 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  757.983210][    C1] sd 0:0:1:0: [sg0] tag#7009 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  757.992872][    C0] sd 0:0:1:0: [sg0] tag#7010 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  758.002458][    C1] sd 0:0:1:0: [sg0] tag#7009 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  758.012084][    C0] sd 0:0:1:0: [sg0] tag#7010 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  758.021671][    C1] sd 0:0:1:0: [sg0] tag#7009 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  758.031319][    C0] sd 0:0:1:0: [sg0] tag#7010 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  758.040951][    C1] sd 0:0:1:0: [sg0] tag#7009 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  758.050589][    C0] sd 0:0:1:0: [sg0] tag#7010 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  758.060213][    C1] sd 0:0:1:0: [sg0] tag#7009 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  758.069851][    C0] sd 0:0:1:0: [sg0] tag#7010 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  758.079470][    C1] sd 0:0:1:0: [sg0] tag#7009 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  758.089095][    C0] sd 0:0:1:0: [sg0] tag#7010 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  758.098724][    C1] sd 0:0:1:0: [sg0] tag#7009 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  758.108384][    C0] sd 0:0:1:0: [sg0] tag#7010 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  758.117984][    C1] sd 0:0:1:0: [sg0] tag#7009 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  758.127615][    C0] sd 0:0:1:0: [sg0] tag#7010 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  758.137234][    C1] sd 0:0:1:0: [sg0] tag#7009 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  758.146860][    C0] sd 0:0:1:0: [sg0] tag#7010 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  758.156491][    C1] sd 0:0:1:0: [sg0] tag#7009 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  758.166124][    C0] sd 0:0:1:0: [sg0] tag#7010 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  758.175751][    C1] sd 0:0:1:0: [sg0] tag#7009 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  758.185379][    C0] sd 0:0:1:0: [sg0] tag#7010 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  758.195000][    C1] sd 0:0:1:0: [sg0] tag#7009 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  758.204632][    C0] sd 0:0:1:0: [sg0] tag#7010 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  758.214249][    C1] sd 0:0:1:0: [sg0] tag#7009 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  758.223889][    C0] sd 0:0:1:0: [sg0] tag#7010 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  758.242135][    C0] sd 0:0:1:0: [sg0] tag#7010 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:42:27 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:27 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:27 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:27 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x38, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}]}, 0x38}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:27 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:27 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
r4 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r4, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r4, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:27 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  758.784799][T28877] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:42:28 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:28 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(0x0, 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:28 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x38, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}]}, 0x38}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:28 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket(0xa, 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x8, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r1 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r1, &(0x7f00000007c0)=[{0x0}], 0x1)

09:42:28 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:28 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
r4 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r4, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r4, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  759.370644][T28901] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:42:28 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:28 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYRESDEC], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r2 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r2, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:42:28 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:28 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(0x0, 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  759.844939][T28920] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:42:28 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYRESDEC], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r2 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r2, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)

09:42:29 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
r4 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r4, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r4, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:29 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400", 0x22}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:29 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x0, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:29 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:29 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:29 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(0x0, 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  760.469550][T28947] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  760.528028][T28953] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  760.559058][    C0] scsi_io_completion_action: 12 callbacks suppressed
[  760.559156][    C0] sd 0:0:1:0: [sg0] tag#7035 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
09:42:29 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYRESDEC], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
r2 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r2, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)

[  760.575736][    C0] sd 0:0:1:0: [sg0] tag#7035 CDB: Test Unit Ready
[  760.582356][    C0] sd 0:0:1:0: [sg0] tag#7035 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  760.592114][    C0] sd 0:0:1:0: [sg0] tag#7035 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  760.601947][    C0] sd 0:0:1:0: [sg0] tag#7035 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  760.611664][    C0] sd 0:0:1:0: [sg0] tag#7035 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  760.621441][    C0] sd 0:0:1:0: [sg0] tag#7035 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  760.631204][    C0] sd 0:0:1:0: [sg0] tag#7035 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  760.641035][    C0] sd 0:0:1:0: [sg0] tag#7035 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  760.650815][    C0] sd 0:0:1:0: [sg0] tag#7035 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  760.660637][    C0] sd 0:0:1:0: [sg0] tag#7035 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  760.670519][    C0] sd 0:0:1:0: [sg0] tag#7035 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  760.680317][    C0] sd 0:0:1:0: [sg0] tag#7035 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  760.685952][    C1] sd 0:0:1:0: [sg0] tag#7036 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  760.690053][    C0] sd 0:0:1:0: [sg0] tag#7035 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  760.699481][    C1] sd 0:0:1:0: [sg0] tag#7036 CDB: Test Unit Ready
[  760.709138][    C0] sd 0:0:1:0: [sg0] tag#7035 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  760.715647][    C1] sd 0:0:1:0: [sg0] tag#7036 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  760.725281][    C0] sd 0:0:1:0: [sg0] tag#7035 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  760.734922][    C1] sd 0:0:1:0: [sg0] tag#7036 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  760.744536][    C0] sd 0:0:1:0: [sg0] tag#7035 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  760.754160][    C1] sd 0:0:1:0: [sg0] tag#7036 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  760.772393][    C1] sd 0:0:1:0: [sg0] tag#7036 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  760.782155][    C1] sd 0:0:1:0: [sg0] tag#7036 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  760.791905][    C1] sd 0:0:1:0: [sg0] tag#7036 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  760.801605][    C1] sd 0:0:1:0: [sg0] tag#7036 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  760.811371][    C1] sd 0:0:1:0: [sg0] tag#7036 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  760.821130][    C1] sd 0:0:1:0: [sg0] tag#7036 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  760.830912][    C1] sd 0:0:1:0: [sg0] tag#7036 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  760.840667][    C1] sd 0:0:1:0: [sg0] tag#7036 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  760.850449][    C1] sd 0:0:1:0: [sg0] tag#7036 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  760.860198][    C1] sd 0:0:1:0: [sg0] tag#7036 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  760.869966][    C1] sd 0:0:1:0: [sg0] tag#7036 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:29 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
r4 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r4, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r4, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  760.879717][    C1] sd 0:0:1:0: [sg0] tag#7036 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:42:30 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  761.012416][    C1] sd 0:0:1:0: [sg0] tag#7037 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  761.022113][    C1] sd 0:0:1:0: [sg0] tag#7037 CDB: Test Unit Ready
[  761.028792][    C1] sd 0:0:1:0: [sg0] tag#7037 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.038689][    C1] sd 0:0:1:0: [sg0] tag#7037 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.048509][    C1] sd 0:0:1:0: [sg0] tag#7037 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.058381][    C1] sd 0:0:1:0: [sg0] tag#7037 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.068221][    C1] sd 0:0:1:0: [sg0] tag#7037 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.078067][    C1] sd 0:0:1:0: [sg0] tag#7037 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.087879][    C1] sd 0:0:1:0: [sg0] tag#7037 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.097768][    C1] sd 0:0:1:0: [sg0] tag#7037 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.107596][    C1] sd 0:0:1:0: [sg0] tag#7037 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.117447][    C1] sd 0:0:1:0: [sg0] tag#7037 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.127291][    C1] sd 0:0:1:0: [sg0] tag#7037 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.137099][    C1] sd 0:0:1:0: [sg0] tag#7037 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.146922][    C1] sd 0:0:1:0: [sg0] tag#7037 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:30 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:30 executing program 2:

09:42:30 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  761.156774][    C1] sd 0:0:1:0: [sg0] tag#7037 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.166595][    C1] sd 0:0:1:0: [sg0] tag#7037 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  761.369987][    C1] sd 0:0:1:0: [sg0] tag#7038 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  761.379739][    C1] sd 0:0:1:0: [sg0] tag#7038 CDB: Test Unit Ready
[  761.386396][    C1] sd 0:0:1:0: [sg0] tag#7038 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.396155][    C1] sd 0:0:1:0: [sg0] tag#7038 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.405908][    C1] sd 0:0:1:0: [sg0] tag#7038 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.415712][    C1] sd 0:0:1:0: [sg0] tag#7038 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.425455][    C1] sd 0:0:1:0: [sg0] tag#7038 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.426777][T28975] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  761.435192][    C1] sd 0:0:1:0: [sg0] tag#7038 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.435278][    C1] sd 0:0:1:0: [sg0] tag#7038 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.435367][    C1] sd 0:0:1:0: [sg0] tag#7038 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.435456][    C1] sd 0:0:1:0: [sg0] tag#7038 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.435541][    C1] sd 0:0:1:0: [sg0] tag#7038 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.435622][    C1] sd 0:0:1:0: [sg0] tag#7038 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.435703][    C1] sd 0:0:1:0: [sg0] tag#7038 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.511377][    C1] sd 0:0:1:0: [sg0] tag#7038 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:30 executing program 2:
r0 = creat(&(0x7f0000000540)='./bus\x00', 0x0)
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYPTR64], 0x8)
fallocate(r0, 0x3, 0x0, 0x8020001)

09:42:30 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, 0x0, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
r4 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r4, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r4, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  761.521180][    C1] sd 0:0:1:0: [sg0] tag#7038 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.530954][    C1] sd 0:0:1:0: [sg0] tag#7038 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  761.570414][    C0] sd 0:0:1:0: [sg0] tag#7039 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  761.580075][    C0] sd 0:0:1:0: [sg0] tag#7039 CDB: Test Unit Ready
[  761.586767][    C0] sd 0:0:1:0: [sg0] tag#7039 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.596535][    C0] sd 0:0:1:0: [sg0] tag#7039 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.606346][    C0] sd 0:0:1:0: [sg0] tag#7039 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.616149][    C0] sd 0:0:1:0: [sg0] tag#7039 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.625978][    C0] sd 0:0:1:0: [sg0] tag#7039 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.635741][    C0] sd 0:0:1:0: [sg0] tag#7039 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.645548][    C0] sd 0:0:1:0: [sg0] tag#7039 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.655321][    C0] sd 0:0:1:0: [sg0] tag#7039 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.665132][    C0] sd 0:0:1:0: [sg0] tag#7039 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.674912][    C0] sd 0:0:1:0: [sg0] tag#7039 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.684717][    C0] sd 0:0:1:0: [sg0] tag#7039 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.694482][    C0] sd 0:0:1:0: [sg0] tag#7039 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.704360][    C0] sd 0:0:1:0: [sg0] tag#7039 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:30 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0)

09:42:30 executing program 2:

[  761.714128][    C0] sd 0:0:1:0: [sg0] tag#7039 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.723921][    C0] sd 0:0:1:0: [sg0] tag#7039 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  761.831244][    C0] sd 0:0:1:0: [sg0] tag#6976 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  761.840890][    C0] sd 0:0:1:0: [sg0] tag#6976 CDB: Test Unit Ready
[  761.847590][    C0] sd 0:0:1:0: [sg0] tag#6976 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.857445][    C0] sd 0:0:1:0: [sg0] tag#6976 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.867214][    C0] sd 0:0:1:0: [sg0] tag#6976 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.877024][    C0] sd 0:0:1:0: [sg0] tag#6976 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.886809][    C0] sd 0:0:1:0: [sg0] tag#6976 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.896629][    C0] sd 0:0:1:0: [sg0] tag#6976 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.906413][    C0] sd 0:0:1:0: [sg0] tag#6976 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.916237][    C0] sd 0:0:1:0: [sg0] tag#6976 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.926018][    C0] sd 0:0:1:0: [sg0] tag#6976 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.935814][    C0] sd 0:0:1:0: [sg0] tag#6976 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.945567][    C0] sd 0:0:1:0: [sg0] tag#6976 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.955402][    C0] sd 0:0:1:0: [sg0] tag#6976 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.965202][    C0] sd 0:0:1:0: [sg0] tag#6976 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:31 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:31 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x38, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x38}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  761.974961][    C0] sd 0:0:1:0: [sg0] tag#6976 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  761.984754][    C0] sd 0:0:1:0: [sg0] tag#6976 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:42:31 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, 0x0, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
r4 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r4, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r4, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:31 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:31 executing program 2:

[  762.130585][    C0] sd 0:0:1:0: [sg0] tag#6977 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  762.140212][    C0] sd 0:0:1:0: [sg0] tag#6977 CDB: Test Unit Ready
[  762.146894][    C0] sd 0:0:1:0: [sg0] tag#6977 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.156670][    C0] sd 0:0:1:0: [sg0] tag#6977 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.166530][    C0] sd 0:0:1:0: [sg0] tag#6977 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.176291][    C0] sd 0:0:1:0: [sg0] tag#6977 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.186100][    C0] sd 0:0:1:0: [sg0] tag#6977 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.195866][    C0] sd 0:0:1:0: [sg0] tag#6977 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.205669][    C0] sd 0:0:1:0: [sg0] tag#6977 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.215420][    C0] sd 0:0:1:0: [sg0] tag#6977 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.225229][    C0] sd 0:0:1:0: [sg0] tag#6977 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.234978][    C0] sd 0:0:1:0: [sg0] tag#6977 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.244769][    C0] sd 0:0:1:0: [sg0] tag#6977 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.254533][    C0] sd 0:0:1:0: [sg0] tag#6977 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.259369][T29012] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:42:31 executing program 3:

[  762.264317][    C0] sd 0:0:1:0: [sg0] tag#6977 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.264408][    C0] sd 0:0:1:0: [sg0] tag#6977 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.264495][    C0] sd 0:0:1:0: [sg0] tag#6977 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:42:31 executing program 2:

[  762.543440][    C1] sd 0:0:1:0: [sg0] tag#6979 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  762.553151][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB: Test Unit Ready
[  762.559794][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.569586][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.579319][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:31 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
r3 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r3, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r3, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  762.589203][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.598956][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.608728][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.618503][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.628272][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.638037][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.647800][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.657762][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.667532][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.677288][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:31 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x0, 0x2000402)
fallocate(r0, 0x0, 0x0, 0x110001)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x4, r1})

09:42:31 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0)
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x3, &(0x7f0000000100)=<r1=>0x0)
io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])

[  762.687043][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.696786][    C1] sd 0:0:1:0: [sg0] tag#6979 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  762.753107][    C0] sd 0:0:1:0: [sg0] tag#6978 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  762.762806][    C0] sd 0:0:1:0: [sg0] tag#6978 CDB: Test Unit Ready
[  762.769471][    C0] sd 0:0:1:0: [sg0] tag#6978 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.779364][    C0] sd 0:0:1:0: [sg0] tag#6978 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.789313][    C0] sd 0:0:1:0: [sg0] tag#6978 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.799155][    C0] sd 0:0:1:0: [sg0] tag#6978 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.808956][    C0] sd 0:0:1:0: [sg0] tag#6978 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.818784][    C0] sd 0:0:1:0: [sg0] tag#6978 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.828667][    C0] sd 0:0:1:0: [sg0] tag#6978 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.838514][    C0] sd 0:0:1:0: [sg0] tag#6978 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.848369][    C0] sd 0:0:1:0: [sg0] tag#6978 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.858189][    C0] sd 0:0:1:0: [sg0] tag#6978 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.868036][    C0] sd 0:0:1:0: [sg0] tag#6978 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.877850][    C0] sd 0:0:1:0: [sg0] tag#6978 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.887675][    C0] sd 0:0:1:0: [sg0] tag#6978 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:31 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x0, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  762.897488][    C0] sd 0:0:1:0: [sg0] tag#6978 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  762.907316][    C0] sd 0:0:1:0: [sg0] tag#6978 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  763.075643][    C1] sd 0:0:1:0: [sg0] tag#6980 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  763.085304][    C1] sd 0:0:1:0: [sg0] tag#6980 CDB: Test Unit Ready
[  763.091969][    C1] sd 0:0:1:0: [sg0] tag#6980 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  763.101917][    C1] sd 0:0:1:0: [sg0] tag#6980 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  763.111624][    C1] sd 0:0:1:0: [sg0] tag#6980 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  763.121428][    C1] sd 0:0:1:0: [sg0] tag#6980 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  763.131174][    C1] sd 0:0:1:0: [sg0] tag#6980 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  763.140971][    C1] sd 0:0:1:0: [sg0] tag#6980 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  763.150736][    C1] sd 0:0:1:0: [sg0] tag#6980 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  763.160482][    C1] sd 0:0:1:0: [sg0] tag#6980 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  763.170228][    C1] sd 0:0:1:0: [sg0] tag#6980 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  763.179967][    C1] sd 0:0:1:0: [sg0] tag#6980 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  763.189755][    C1] sd 0:0:1:0: [sg0] tag#6980 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  763.199496][    C1] sd 0:0:1:0: [sg0] tag#6980 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  763.209271][    C1] sd 0:0:1:0: [sg0] tag#6980 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:32 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
r0 = socket(0xa, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  763.219033][    C1] sd 0:0:1:0: [sg0] tag#6980 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  763.228809][    C1] sd 0:0:1:0: [sg0] tag#6980 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:42:32 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x38, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x38}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:32 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
r3 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r3, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r3, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:32 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  763.456703][T29056] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:42:32 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x38, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x38}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:32 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0x0, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:32 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  763.912066][T29077] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:42:33 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
r3 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r3, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r3, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:33 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x4})

09:42:33 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x2710})

09:42:33 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:33 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0x0, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:33 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:33 executing program 2:
r0 = creat(&(0x7f0000000540)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0))
write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYPTR64], 0x8)
fallocate(r0, 0x3, 0x0, 0x8020001)

[  764.433080][T29105] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:42:33 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
sendmsg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
r3 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r3, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r3, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:33 executing program 3:
clock_adjtime(0x0, &(0x7f00000000c0)={0x4})

09:42:33 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @remote}}}, 0x88)

09:42:33 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0x0, 0x1, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:33 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:33 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:33 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

09:42:34 executing program 2:
r0 = creat(&(0x7f0000000540)='./bus\x00', 0x0)
lseek(r0, 0x0, 0x3)

[  765.008876][T29140] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:42:34 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_elf64(r0, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000540), 0x118)
recvmmsg(r1, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

09:42:34 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x0, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:34 executing program 3:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000002400070500"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000007000100667100003400020008000a000000000008000600000000000800020000000000080008400c00000008000100000000000800040000000000"], 0x60}}, 0x0)

09:42:34 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
sendmsg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
r3 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r3, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r3, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:34 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:34 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:34 executing program 3:
clock_adjtime(0x0, &(0x7f00000000c0)={0x7})

09:42:34 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x0, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  765.682477][    C1] scsi_io_completion_action: 12 callbacks suppressed
[  765.682578][    C1] sd 0:0:1:0: [sg0] tag#6996 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  765.699008][    C1] sd 0:0:1:0: [sg0] tag#6996 CDB: Test Unit Ready
[  765.705668][    C1] sd 0:0:1:0: [sg0] tag#6996 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  765.715428][    C1] sd 0:0:1:0: [sg0] tag#6996 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  765.725238][    C1] sd 0:0:1:0: [sg0] tag#6996 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  765.734998][    C1] sd 0:0:1:0: [sg0] tag#6996 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  765.744750][    C1] sd 0:0:1:0: [sg0] tag#6996 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  765.754505][    C1] sd 0:0:1:0: [sg0] tag#6996 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  765.764250][    C1] sd 0:0:1:0: [sg0] tag#6996 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  765.774004][    C1] sd 0:0:1:0: [sg0] tag#6996 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  765.783754][    C1] sd 0:0:1:0: [sg0] tag#6996 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  765.793508][    C1] sd 0:0:1:0: [sg0] tag#6996 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  765.803271][    C1] sd 0:0:1:0: [sg0] tag#6996 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  765.813027][    C1] sd 0:0:1:0: [sg0] tag#6996 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  765.822785][    C1] sd 0:0:1:0: [sg0] tag#6996 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:34 executing program 3:
setuid(0xee01)
r0 = msgget(0x2, 0x0)
msgctl$IPC_STAT(r0, 0x2, 0x0)

[  765.832535][    C1] sd 0:0:1:0: [sg0] tag#6996 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  765.842281][    C1] sd 0:0:1:0: [sg0] tag#6996 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  765.890666][T29181] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  765.954450][    C0] sd 0:0:1:0: [sg0] tag#6998 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  765.955474][    C1] sd 0:0:1:0: [sg0] tag#6997 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  765.964169][    C0] sd 0:0:1:0: [sg0] tag#6998 CDB: Test Unit Ready
[  765.973652][    C1] sd 0:0:1:0: [sg0] tag#6997 CDB: Test Unit Ready
[  765.980117][    C0] sd 0:0:1:0: [sg0] tag#6998 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  765.986629][    C1] sd 0:0:1:0: [sg0] tag#6997 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  765.996335][    C0] sd 0:0:1:0: [sg0] tag#6998 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.005889][    C1] sd 0:0:1:0: [sg0] tag#6997 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.015517][    C0] sd 0:0:1:0: [sg0] tag#6998 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.025146][    C1] sd 0:0:1:0: [sg0] tag#6997 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.034790][    C0] sd 0:0:1:0: [sg0] tag#6998 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.044411][    C1] sd 0:0:1:0: [sg0] tag#6997 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.054064][    C0] sd 0:0:1:0: [sg0] tag#6998 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.063707][    C1] sd 0:0:1:0: [sg0] tag#6997 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.073332][    C0] sd 0:0:1:0: [sg0] tag#6998 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.082977][    C1] sd 0:0:1:0: [sg0] tag#6997 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.092689][    C0] sd 0:0:1:0: [sg0] tag#6998 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.102310][    C1] sd 0:0:1:0: [sg0] tag#6997 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.111934][    C0] sd 0:0:1:0: [sg0] tag#6998 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.121508][    C1] sd 0:0:1:0: [sg0] tag#6997 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.131131][    C0] sd 0:0:1:0: [sg0] tag#6998 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.140753][    C1] sd 0:0:1:0: [sg0] tag#6997 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.150378][    C0] sd 0:0:1:0: [sg0] tag#6998 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.160000][    C1] sd 0:0:1:0: [sg0] tag#6997 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.169653][    C0] sd 0:0:1:0: [sg0] tag#6998 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.179368][    C1] sd 0:0:1:0: [sg0] tag#6997 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.189343][    C0] sd 0:0:1:0: [sg0] tag#6998 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.198966][    C1] sd 0:0:1:0: [sg0] tag#6997 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.208619][    C0] sd 0:0:1:0: [sg0] tag#6998 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.218240][    C1] sd 0:0:1:0: [sg0] tag#6997 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.227869][    C0] sd 0:0:1:0: [sg0] tag#6998 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.237488][    C1] sd 0:0:1:0: [sg0] tag#6997 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.247127][    C0] sd 0:0:1:0: [sg0] tag#6998 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  766.256747][    C1] sd 0:0:1:0: [sg0] tag#6997 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
09:42:35 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x40000000, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e0400000000e8bd6efb120009000e000100400000ff050005001201", 0x2e}], 0x1}, 0x0)

09:42:35 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
sendmsg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
r3 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r3, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r3, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:35 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x38, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x38}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:35 executing program 3:
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x40, 0x23, 0x92, 0x10, 0x10b8, 0xbc7, 0x61d8, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x43, 0x9, 0x5}}]}}]}}, 0x0)

[  766.696812][T29209] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  766.753886][    C0] sd 0:0:1:0: [sg0] tag#7001 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  766.763596][    C0] sd 0:0:1:0: [sg0] tag#7001 CDB: Test Unit Ready
[  766.770192][    C0] sd 0:0:1:0: [sg0] tag#7001 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.779943][    C0] sd 0:0:1:0: [sg0] tag#7001 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.789723][    C0] sd 0:0:1:0: [sg0] tag#7001 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:35 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:35 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x0)
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, 0x0, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
r4 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r4, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r4, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:35 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x0, 0x0)
close(r0)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:35 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x40000000, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e0400000000e8bd6efb120009000e000100400000ff050005001201", 0x2e}], 0x1}, 0x0)

[  766.799538][    C0] sd 0:0:1:0: [sg0] tag#7001 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.809320][    C0] sd 0:0:1:0: [sg0] tag#7001 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.814493][    C1] sd 0:0:1:0: [sg0] tag#6999 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  766.819053][    C0] sd 0:0:1:0: [sg0] tag#7001 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.828494][    C1] sd 0:0:1:0: [sg0] tag#6999 CDB: Test Unit Ready
[  766.838123][    C0] sd 0:0:1:0: [sg0] tag#7001 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.844615][    C1] sd 0:0:1:0: [sg0] tag#6999 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.854246][    C0] sd 0:0:1:0: [sg0] tag#7001 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.863888][    C1] sd 0:0:1:0: [sg0] tag#6999 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.873554][    C0] sd 0:0:1:0: [sg0] tag#7001 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.883179][    C1] sd 0:0:1:0: [sg0] tag#6999 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.892807][    C0] sd 0:0:1:0: [sg0] tag#7001 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.902615][    C1] sd 0:0:1:0: [sg0] tag#6999 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.912241][    C0] sd 0:0:1:0: [sg0] tag#7001 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.921862][    C1] sd 0:0:1:0: [sg0] tag#6999 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.931440][    C0] sd 0:0:1:0: [sg0] tag#7001 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.941081][    C1] sd 0:0:1:0: [sg0] tag#6999 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.950731][    C0] sd 0:0:1:0: [sg0] tag#7001 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.960339][    C1] sd 0:0:1:0: [sg0] tag#6999 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.969955][    C0] sd 0:0:1:0: [sg0] tag#7001 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.979658][    C1] sd 0:0:1:0: [sg0] tag#6999 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  766.989294][    C0] sd 0:0:1:0: [sg0] tag#7001 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  766.998918][    C1] sd 0:0:1:0: [sg0] tag#6999 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.017121][    C1] sd 0:0:1:0: [sg0] tag#6999 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.026860][    C1] sd 0:0:1:0: [sg0] tag#6999 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.036594][    C1] sd 0:0:1:0: [sg0] tag#6999 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.046365][    C1] sd 0:0:1:0: [sg0] tag#6999 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.056097][    C1] sd 0:0:1:0: [sg0] tag#6999 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.065913][    C1] sd 0:0:1:0: [sg0] tag#6999 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  767.074834][    C1] sd 0:0:1:0: [sg0] tag#7000 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  767.084407][    C1] sd 0:0:1:0: [sg0] tag#7000 CDB: Test Unit Ready
[  767.090990][    C1] sd 0:0:1:0: [sg0] tag#7000 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.100716][    C1] sd 0:0:1:0: [sg0] tag#7000 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.110454][    C1] sd 0:0:1:0: [sg0] tag#7000 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.120220][    C1] sd 0:0:1:0: [sg0] tag#7000 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.129967][    C1] sd 0:0:1:0: [sg0] tag#7000 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.139693][    C1] sd 0:0:1:0: [sg0] tag#7000 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.149424][    C1] sd 0:0:1:0: [sg0] tag#7000 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.159419][    C1] sd 0:0:1:0: [sg0] tag#7000 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.162075][    C0] sd 0:0:1:0: [sg0] tag#7002 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  767.169142][    C1] sd 0:0:1:0: [sg0] tag#7000 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.178601][    C0] sd 0:0:1:0: [sg0] tag#7002 CDB: Test Unit Ready
[  767.188212][    C1] sd 0:0:1:0: [sg0] tag#7000 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.194724][    C0] sd 0:0:1:0: [sg0] tag#7002 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.204366][    C1] sd 0:0:1:0: [sg0] tag#7000 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.214005][    C0] sd 0:0:1:0: [sg0] tag#7002 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.223623][    C1] sd 0:0:1:0: [sg0] tag#7000 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.233258][    C0] sd 0:0:1:0: [sg0] tag#7002 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.242887][    C1] sd 0:0:1:0: [sg0] tag#7000 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.252519][    C0] sd 0:0:1:0: [sg0] tag#7002 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.262144][    C1] sd 0:0:1:0: [sg0] tag#7000 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.271781][    C0] sd 0:0:1:0: [sg0] tag#7002 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.281346][    C1] sd 0:0:1:0: [sg0] tag#7000 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  767.290948][    C0] sd 0:0:1:0: [sg0] tag#7002 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.309196][    C0] sd 0:0:1:0: [sg0] tag#7002 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.319094][    C0] sd 0:0:1:0: [sg0] tag#7002 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.328857][    C0] sd 0:0:1:0: [sg0] tag#7002 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.338631][    C0] sd 0:0:1:0: [sg0] tag#7002 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.348384][    C0] sd 0:0:1:0: [sg0] tag#7002 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.358196][    C0] sd 0:0:1:0: [sg0] tag#7002 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.367952][    C0] sd 0:0:1:0: [sg0] tag#7002 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.377736][    C0] sd 0:0:1:0: [sg0] tag#7002 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.387520][    C0] sd 0:0:1:0: [sg0] tag#7002 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  767.399183][T29219] vivid-003: kernel_thread() failed
09:42:36 executing program 2:
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000003e40)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c, 0x22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r0 = syz_open_dev$hiddev(&(0x7f0000000300)='/dev/usb/hiddev#\x00', 0x0, 0x0)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x1, 0x80])

09:42:36 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, 0x0, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
r4 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r4, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r4, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  767.421818][T29214] vivid-003: kernel_thread() failed
09:42:36 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r3 = syz_open_procfs(0x0, 0x0)
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, 0x0, 0x0)
socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, 0x0, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x0, 0x5}}, 0x14)
r5 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r5, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  767.538899][T12244] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  767.568642][    C0] sd 0:0:1:0: [sg0] tag#7003 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  767.578304][    C0] sd 0:0:1:0: [sg0] tag#7003 CDB: Test Unit Ready
[  767.584976][    C0] sd 0:0:1:0: [sg0] tag#7003 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.594746][    C0] sd 0:0:1:0: [sg0] tag#7003 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.604514][    C0] sd 0:0:1:0: [sg0] tag#7003 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.614331][    C0] sd 0:0:1:0: [sg0] tag#7003 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.624107][    C0] sd 0:0:1:0: [sg0] tag#7003 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.633872][    C0] sd 0:0:1:0: [sg0] tag#7003 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.643641][    C0] sd 0:0:1:0: [sg0] tag#7003 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.653394][    C0] sd 0:0:1:0: [sg0] tag#7003 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.663159][    C0] sd 0:0:1:0: [sg0] tag#7003 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.672991][    C0] sd 0:0:1:0: [sg0] tag#7003 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:36 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

09:42:36 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
r1 = syz_open_dev$dspn(0x0, 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r2, r3, &(0x7f0000000240)=0x200, 0x4000000000dc)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
r6 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r6], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x38, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x38}, 0x1, 0x0, 0x0, 0x8c090}, 0x40)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x1, 0x4, 0x5}}, 0x14)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700))
r7 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r7, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r7, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  767.682742][    C0] sd 0:0:1:0: [sg0] tag#7003 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.692544][    C0] sd 0:0:1:0: [sg0] tag#7003 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.702303][    C0] sd 0:0:1:0: [sg0] tag#7003 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.712062][    C0] sd 0:0:1:0: [sg0] tag#7003 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.721839][    C0] sd 0:0:1:0: [sg0] tag#7003 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  767.790888][    C1] sd 0:0:1:0: [sg0] tag#7004 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  767.800567][    C1] sd 0:0:1:0: [sg0] tag#7004 CDB: Test Unit Ready
[  767.807227][    C1] sd 0:0:1:0: [sg0] tag#7004 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.817017][    C1] sd 0:0:1:0: [sg0] tag#7004 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.826745][    C1] sd 0:0:1:0: [sg0] tag#7004 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.836539][    C1] sd 0:0:1:0: [sg0] tag#7004 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.846315][    C1] sd 0:0:1:0: [sg0] tag#7004 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.856038][    C1] sd 0:0:1:0: [sg0] tag#7004 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.865825][    C1] sd 0:0:1:0: [sg0] tag#7004 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.875571][    C1] sd 0:0:1:0: [sg0] tag#7004 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.885358][    C1] sd 0:0:1:0: [sg0] tag#7004 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.895105][    C1] sd 0:0:1:0: [sg0] tag#7004 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.904872][    C1] sd 0:0:1:0: [sg0] tag#7004 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.914620][    C1] sd 0:0:1:0: [sg0] tag#7004 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.918253][T29251] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
09:42:37 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(0x0, 0x0, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, 0x0, 0x0)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='syz', 0x3)
write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876d699010000000000000025da3f0dc7ec6e26560000080000ab31c3a45780"], 0x58)
r4 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r4, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
fcntl$getown(r4, 0x9)
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000140)={0x0, 0x6, 0x78c, 0x3}, 0x10)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  767.924402][    C1] sd 0:0:1:0: [sg0] tag#7004 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.924486][    C1] sd 0:0:1:0: [sg0] tag#7004 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  767.942264][    C1] sd 0:0:1:0: [sg0] tag#7004 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  767.995255][    C0] sd 0:0:1:0: [sg0] tag#7005 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  768.005030][    C0] sd 0:0:1:0: [sg0] tag#7005 CDB: Test Unit Ready
[  768.011608][    C0] sd 0:0:1:0: [sg0] tag#7005 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  768.021428][    C0] sd 0:0:1:0: [sg0] tag#7005 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  768.031195][    C0] sd 0:0:1:0: [sg0] tag#7005 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  768.040978][    C0] sd 0:0:1:0: [sg0] tag#7005 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  768.050739][    C0] sd 0:0:1:0: [sg0] tag#7005 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  768.060518][    C0] sd 0:0:1:0: [sg0] tag#7005 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  768.070267][    C0] sd 0:0:1:0: [sg0] tag#7005 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  768.080035][    C0] sd 0:0:1:0: [sg0] tag#7005 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  768.089824][    C0] sd 0:0:1:0: [sg0] tag#7005 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  768.099560][    C0] sd 0:0:1:0: [sg0] tag#7005 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  768.109336][    C0] sd 0:0:1:0: [sg0] tag#7005 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  768.115759][   T17] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  768.119129][    C0] sd 0:0:1:0: [sg0] tag#7005 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  768.136329][    C0] sd 0:0:1:0: [sg0] tag#7005 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
09:42:37 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
r0 = socket(0xa, 0x1, 0x0)
close(0xffffffffffffffff)
sendmmsg$inet_sctp(r0, &(0x7f0000002cc0)=[{0x0, 0xffffffffffffff41, 0x0}], 0x1, 0x0)
syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x8, 0x5)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r1, r2, &(0x7f0000000240)=0x200, 0x4000000000dc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r4], 0x2}, 0x1, 0x0, 0x0, 0x4}, 0x8040)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000001240)=@assoc_value, &(0x7f0000001880)=0x8)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/dlm-control\x00', 0x200400, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000700))
r6 = syz_open_dev$video(&(0x7f0000001800)='/dev/video#\x00', 0x9, 0x0)
readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffd32, 0x23, 0x0, 0xdd)
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)

[  768.146087][    C0] sd 0:0:1:0: [sg0] tag#7005 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  768.155842][    C0] sd 0:0:1:0: [sg0] tag#7005 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  768.404845][   T17] usb 3-1: device descriptor read/64, error 18
[  768.415950][T12244] usb 4-1: Using ep0 maxpacket: 16
[  768.532420][T12244] usb 4-1: New USB device found, idVendor=10b8, idProduct=0bc7, bcdDevice=61.d8
[  768.541623][T12244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  768.552177][T12244] usb 4-1: config 0 descriptor??
[  768.596163][T12244] dvb-usb: found a 'DiBcom USB2.0 DVB-T reference design (MOD3000P)' in warm state.
[  768.610955][T12244] =====================================================
[  768.610959][T12244] BUG: KMSAN: uninit-value in number+0x32e/0x1e40
[  768.610962][T12244] CPU: 0 PID: 12244 Comm: kworker/0:5 Not tainted 5.4.0-rc5+ #0
[  768.610966][T12244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  768.610969][T12244] Workqueue: usb_hub_wq hub_event
[  768.610973][T12244] Call Trace:
[  768.610975][T12244]  dump_stack+0x191/0x1f0
[  768.610978][T12244]  kmsan_report+0x128/0x220
[  768.610980][T12244]  __msan_warning+0x73/0xe0
[  768.610982][T12244]  number+0x32e/0x1e40
[  768.610985][T12244]  ? __msan_poison_alloca+0x158/0x1a0
[  768.610988][T12244]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[  768.610990][T12244]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[  768.610993][T12244]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[  768.610995][T12244]  vsnprintf+0x1e99/0x3210
[  768.610997][T12244]  vscnprintf+0xc2/0x180
[  768.611000][T12244]  vprintk_store+0xef/0x11e0
[  768.611003][T12244]  ? kmsan_internal_unpoison_shadow+0x42/0x80
[  768.611005][T12244]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[  768.611008][T12244]  vprintk_emit+0x2c6/0x860
[  768.611010][T12244]  vprintk_default+0x90/0xa0
[  768.611012][T12244]  vprintk_func+0x635/0x810
[  768.611015][T12244]  ? __msan_poison_alloca+0x158/0x1a0
[  768.611018][T12244]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[  768.611020][T12244]  printk+0x180/0x1c3
[  768.611023][T12244]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[  768.611025][T12244]  dvb_usb_generic_rw+0x8ec/0xea0
[  768.611028][T12244]  dvb_usb_generic_write+0xac/0xc0
[  768.611030][T12244]  dibusb2_0_power_ctrl+0x1a1/0x270
[  768.611033][T12244]  ? dibusb2_0_streaming_ctrl+0x5a0/0x5a0
[  768.611035][T12244]  dvb_usb_device_init+0x173f/0x2e10
[  768.611038][T12244]  ? pm_runtime_enable+0x303/0x4e0
[  768.611040][T12244]  dibusb_mc_probe+0x73/0x80
[  768.611043][T12244]  ? dibusb_thomson_tuner_attach+0x2c0/0x2c0
[  768.611045][T12244]  usb_probe_interface+0xd19/0x1310
[  768.611048][T12244]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[  768.611051][T12244]  ? usb_register_driver+0x860/0x860
[  768.611053][T12244]  really_probe+0xd91/0x1f90
[  768.611055][T12244]  driver_probe_device+0x1ba/0x510
[  768.611058][T12244]  __device_attach_driver+0x5b8/0x790
[  768.611060][T12244]  bus_for_each_drv+0x28e/0x3b0
[  768.611063][T12244]  ? deferred_probe_work_func+0x400/0x400
[  768.611066][T12244]  __device_attach+0x489/0x750
[  768.611068][T12244]  device_initial_probe+0x4a/0x60
[  768.611070][T12244]  bus_probe_device+0x131/0x390
[  768.611073][T12244]  device_add+0x25b5/0x2df0
[  768.611075][T12244]  usb_set_configuration+0x309f/0x3710
[  768.611078][T12244]  ? __msan_metadata_ptr_for_load_1+0x10/0x20
[  768.611080][T12244]  generic_probe+0xe7/0x280
[  768.611083][T12244]  ? usb_choose_configuration+0xae0/0xae0
[  768.611085][T12244]  usb_probe_device+0x146/0x200
[  768.611088][T12244]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[  768.611091][T12244]  ? usb_register_device_driver+0x500/0x500
[  768.611093][T12244]  really_probe+0xd91/0x1f90
[  768.611096][T12244]  driver_probe_device+0x1ba/0x510
[  768.611098][T12244]  __device_attach_driver+0x5b8/0x790
[  768.611101][T12244]  bus_for_each_drv+0x28e/0x3b0
[  768.611103][T12244]  ? deferred_probe_work_func+0x400/0x400
[  768.611106][T12244]  __device_attach+0x489/0x750
[  768.611108][T12244]  device_initial_probe+0x4a/0x60
[  768.611111][T12244]  bus_probe_device+0x131/0x390
[  768.611113][T12244]  device_add+0x25b5/0x2df0
[  768.611115][T12244]  usb_new_device+0x23e5/0x2fb0
[  768.611118][T12244]  hub_event+0x581d/0x72f0
[  768.611120][T12244]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[  768.611123][T12244]  ? led_work+0x720/0x720
[  768.611125][T12244]  ? led_work+0x720/0x720
[  768.611127][T12244]  process_one_work+0x1572/0x1ef0
[  768.611130][T12244]  worker_thread+0x111b/0x2460
[  768.611132][T12244]  kthread+0x4b5/0x4f0
[  768.611135][T12244]  ? process_one_work+0x1ef0/0x1ef0
[  768.611137][T12244]  ? kthread_blkcg+0xf0/0xf0
[  768.611139][T12244]  ret_from_fork+0x35/0x40
[  768.611141][T12244] 
[  768.611144][T12244] Local variable description: ----actlen@dvb_usb_generic_rw
[  768.611147][T12244] Variable was created at:
[  768.611149][T12244]  dvb_usb_generic_rw+0xd3/0xea0
[  768.611152][T12244]  dvb_usb_generic_rw+0xd3/0xea0
[  768.611155][T12244] =====================================================
[  768.611158][T12244] Disabling lock debugging due to kernel taint
[  768.611161][T12244] Kernel panic - not syncing: panic_on_warn set ...
[  768.611164][T12244] CPU: 0 PID: 12244 Comm: kworker/0:5 Tainted: G    B             5.4.0-rc5+ #0
[  768.611168][T12244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  768.611171][T12244] Workqueue: usb_hub_wq hub_event
[  768.611174][T12244] Call Trace:
[  768.611177][T12244]  dump_stack+0x191/0x1f0
[  768.611179][T12244]  panic+0x3c9/0xc1e
[  768.611181][T12244]  kmsan_report+0x215/0x220
[  768.611184][T12244]  __msan_warning+0x73/0xe0
[  768.611186][T12244]  number+0x32e/0x1e40
[  768.611188][T12244]  ? __msan_poison_alloca+0x158/0x1a0
[  768.611191][T12244]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[  768.611194][T12244]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[  768.611196][T12244]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[  768.611199][T12244]  vsnprintf+0x1e99/0x3210
[  768.611201][T12244]  vscnprintf+0xc2/0x180
[  768.611204][T12244]  vprintk_store+0xef/0x11e0
[  768.611206][T12244]  ? kmsan_internal_unpoison_shadow+0x42/0x80
[  768.611209][T12244]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[  768.611211][T12244]  vprintk_emit+0x2c6/0x860
[  768.611214][T12244]  vprintk_default+0x90/0xa0
[  768.611216][T12244]  vprintk_func+0x635/0x810
[  768.611219][T12244]  ? __msan_poison_alloca+0x158/0x1a0
[  768.611222][T12244]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[  768.611224][T12244]  printk+0x180/0x1c3
[  768.611227][T12244]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[  768.611229][T12244]  dvb_usb_generic_rw+0x8ec/0xea0
[  768.611231][T12244]  dvb_usb_generic_write+0xac/0xc0
[  768.611234][T12244]  dibusb2_0_power_ctrl+0x1a1/0x270
[  768.611237][T12244]  ? dibusb2_0_streaming_ctrl+0x5a0/0x5a0
[  768.611239][T12244]  dvb_usb_device_init+0x173f/0x2e10
[  768.611242][T12244]  ? pm_runtime_enable+0x303/0x4e0
[  768.611244][T12244]  dibusb_mc_probe+0x73/0x80
[  768.611247][T12244]  ? dibusb_thomson_tuner_attach+0x2c0/0x2c0
[  768.611249][T12244]  usb_probe_interface+0xd19/0x1310
[  768.611252][T12244]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[  768.611255][T12244]  ? usb_register_driver+0x860/0x860
[  768.611257][T12244]  really_probe+0xd91/0x1f90
[  768.611259][T12244]  driver_probe_device+0x1ba/0x510
[  768.611262][T12244]  __device_attach_driver+0x5b8/0x790
[  768.611264][T12244]  bus_for_each_drv+0x28e/0x3b0
[  768.611267][T12244]  ? deferred_probe_work_func+0x400/0x400
[  768.611269][T12244]  __device_attach+0x489/0x750
[  768.611272][T12244]  device_initial_probe+0x4a/0x60
[  768.611274][T12244]  bus_probe_device+0x131/0x390
[  768.611277][T12244]  device_add+0x25b5/0x2df0
[  768.611279][T12244]  usb_set_configuration+0x309f/0x3710
[  768.611282][T12244]  ? __msan_metadata_ptr_for_load_1+0x10/0x20
[  768.611284][T12244]  generic_probe+0xe7/0x280
[  768.611287][T12244]  ? usb_choose_configuration+0xae0/0xae0
[  768.611289][T12244]  usb_probe_device+0x146/0x200
[  768.611292][T12244]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[  768.611295][T12244]  ? usb_register_device_driver+0x500/0x500
[  768.611297][T12244]  really_probe+0xd91/0x1f90
[  768.611300][T12244]  driver_probe_device+0x1ba/0x510
[  768.611302][T12244]  __device_attach_driver+0x5b8/0x790
[  768.611305][T12244]  bus_for_each_drv+0x28e/0x3b0
[  768.611307][T12244]  ? deferred_probe_work_func+0x400/0x400
[  768.611310][T12244]  __device_attach+0x489/0x750
[  768.611312][T12244]  device_initial_probe+0x4a/0x60
[  768.611315][T12244]  bus_probe_device+0x131/0x390
[  768.611317][T12244]  device_add+0x25b5/0x2df0
[  768.611319][T12244]  usb_new_device+0x23e5/0x2fb0
[  768.611322][T12244]  hub_event+0x581d/0x72f0
[  768.611324][T12244]  ? kmsan_get_shadow_origin_ptr+0x91/0x4b0
[  768.611326][T12244]  ? led_work+0x720/0x720
[  768.611329][T12244]  ? led_work+0x720/0x720
[  768.611331][T12244]  process_one_work+0x1572/0x1ef0
[  768.611334][T12244]  worker_thread+0x111b/0x2460
[  768.611336][T12244]  kthread+0x4b5/0x4f0
[  768.611338][T12244]  ? process_one_work+0x1ef0/0x1ef0
[  768.611341][T12244]  ? kthread_blkcg+0xf0/0xf0
[  768.611343][T12244]  ret_from_fork+0x35/0x40
[  768.611345][T12244] Kernel Offset: disabled