x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x5}}}], 0xffffff76) 15:29:31 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x3c00000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:29:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) getsockname$tipc(r1, &(0x7f00000000c0)=@id, &(0x7f0000000100)=0x10) 15:29:31 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x6}}}], 0xffffff76) 15:29:31 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x7af) socket$l2tp(0x18, 0x1, 0x1) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:29:32 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x4000000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2072.092455] misc userio: Invalid payload size [ 2072.171486] misc userio: Invalid payload size 15:29:32 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x0, {0x8001, 0x6, 0x3037, 0x1, 0xb, 0x7, 0x0, 0x6}}) 15:29:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:29:32 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x0, &(0x7f0000000040)={@multicast2, @remote}, 0x8) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0xa00, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x4, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000140)={r0, r2}) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:29:32 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x8}}}], 0xffffff76) 15:29:32 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x5800000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:32 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000280)=0x40) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) r3 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x80000000003, 0x800001) ioctl$int_in(r3, 0x80800000c0045006, &(0x7f0000000000)=0x6c) ioctl$int_in(r3, 0x801000c0045002, &(0x7f0000000080)) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(r2, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x422400}, 0xc, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="90e000ee8b050000000000001f0000776f0000", @ANYRES16=r5, @ANYBLOB="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"], 0x290}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0xc6) sendto$inet(r4, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="df", 0xffffffffffffffc0, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x7af) [ 2072.621423] misc userio: Invalid payload size 15:29:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:29:32 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x8dffffff00000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:32 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x9}}}], 0xffffff76) [ 2072.686668] misc userio: Invalid payload size 15:29:32 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) memfd_create(&(0x7f0000000040)='mime_typeem0trusted\\posix_acl_accessprocem0eth0\x00', 0x2) connect$inet(r0, &(0x7f0000000000)={0x2, 0x10000080004e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)="00c8fdc0c3978c31848d74be7222e95812956980f04864feeb02ee20c06f7abe5568af289457f5f2bf7c9efb43169e8bcf34a0e55fe40718288fa820abfe6ee928b7ede216521d4140528c52794eed6d084075894575a0c43eb9bf84cba34ab43775cd98d282f9f215ef038a3c7d78442acadc6f1f978b2e4936553e21ffce6b5c1405429f5e8b48686247cd202b0cec507288aaae53fec04c96cb095d", 0x9d, 0x40000, 0x0, 0xfffffffffffffd32) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x40000, 0x0) getsockname$unix(r1, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) 15:29:32 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0xf5ffffff00000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:29:33 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:29:33 executing program 3: r0 = mq_open(&(0x7f0000000040)='vboxnet0ppp1$\x00', 0x800, 0x1, &(0x7f00000000c0)={0x1, 0x81, 0x81, 0x10001, 0x81, 0x7, 0x9, 0x7fffffff}) ioctl$int_out(r0, 0x2, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r1, &(0x7f0000000440)="af", 0x1, 0x400c0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:29:33 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x1e}}}], 0xffffff76) 15:29:33 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000140)) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x4964b6e460e64ebd, 0x8000, 0x0, 0xffffffffffffff76) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(r3, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000100)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:29:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:29:33 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0xffffffff00000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:33 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0xffffffffffffffff], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) [ 2073.533408] misc userio: Invalid payload size 15:29:33 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x21}}}], 0xffffff76) 15:29:33 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x2], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:29:33 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x200, &(0x7f0000000040)='batadv0\x00', 0x10001, 0xfffffffffffffff9, 0x3ff}) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) [ 2073.666914] misc userio: Invalid payload size 15:29:34 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x3], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:34 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x22}}}], 0xffffff76) 15:29:34 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0x4b, "ff7546ffc39921065de95242299f092f990b8101104862f462253e1b2b4163652ed37d94925b78f664e4621c2fa291c2047fc6c6a6b53ebd69e50e91de5c5449ca7ff7f32aef5abfa9048b"}, &(0x7f0000000040)=0x53) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000240)={r5, 0xdaa}, 0x8) sendto$inet(r4, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:29:34 executing program 3: bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0xfffffffffffffeab) sendto$inet(0xffffffffffffffff, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40000, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x80000001, 0x282581) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x80, 0x0) write$cgroup_int(r2, &(0x7f0000000280)=0x4, 0x12) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x28001, 0x0) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000180)="84635141d6e423b5e208df2a3e2c4024caeddec078dcfb5beb25751601167eecdb4990a28eac67baa78d60c5bae27704e49f7a77ffb4f852319ce1b7fa9d6e1b6bcab68cfa0b4141dd46ce0afff497680900443e108af6c43a7c7aad633a", 0xffffffdc) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000140)={r1, 0x2, 0xff, r3}) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:29:34 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) accept$inet(r0, 0x0, &(0x7f0000000040)) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:29:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:29:34 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x6], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2074.408527] misc userio: Invalid payload size 15:29:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:29:34 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x23}}}], 0xffffff76) 15:29:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0xfffffffffffffc33, 0x6200010, 0x0, 0x0) [ 2074.503139] misc userio: Invalid payload size 15:29:34 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x7], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:29:34 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x26}}}], 0xffffff76) 15:29:34 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x33], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:34 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(r0, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) [ 2074.893667] misc userio: Invalid payload size [ 2074.925769] misc userio: Invalid payload size 15:29:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:29:35 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xbf}}}], 0xffffff76) 15:29:35 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x3c], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:35 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040), 0x4) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:29:35 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) [ 2075.359664] misc userio: Invalid payload size 15:29:35 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x58], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x400000000004e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x795) iopl(0xc4c0) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:29:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:29:35 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x1f4}}}], 0xffffff76) [ 2075.492491] misc userio: Invalid payload size 15:29:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x612182, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x1ff}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000240)={r2, 0xa, "1a22892c830bbe6af3ec"}, &(0x7f0000000280)=0x12) r3 = dup(r0) write$P9_RLERRORu(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="0e00100007020000e00000a5000a000000"], 0xe) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @rand_addr=0x9}, 0x10) getpid() connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x2, 'lo\x00'}, 0x18) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') 15:29:35 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x300], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:29:35 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x500}}}], 0xffffff76) 15:29:35 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000040)="52bd7c06bab285e11036d46e134f4b980000000000000003fb871d6c49e167c04d1019be410d", 0xfdec, 0x4004000010, 0x0, 0xfffffffffffffee7) sendto$inet(r4, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000140)={0xffffffffffffffff}, 0x3, {0xa, 0x4e23, 0x1000, @mcast2}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000280)={0x7ffffffff000, 0x181, 0xfa00, {&(0x7f00000001c0), r5}}, 0xfffffffffffffd4c) fcntl$getown(r0, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:29:35 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x600], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2075.786679] misc userio: Invalid payload size [ 2075.850546] misc userio: Invalid payload size 15:29:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:29:36 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x600}}}], 0xffffff76) 15:29:36 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/raw\x00') connect$rds(r0, &(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x142d) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r1, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:29:36 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x700], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:36 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x84000) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000380)={0x14, 0x40, &(0x7f00000002c0)="c3ade528bbc5a8c97786d531a1d2cd", {0x6, 0x6, 0x72735f5e, 0x7, 0x7, 0x5, 0xd, 0x1}}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x200, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000240)) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000300)='v\x00', 0x36b) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:29:36 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x8, 0x7, 0xa7, &(0x7f0000ffd000/0x2000)=nil, 0x1000}) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) [ 2076.218138] misc userio: Invalid payload size 15:29:36 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x3300], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:36 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x900}}}], 0xffffff76) 15:29:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:29:36 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x3f, 0x100) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40080000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(n0', @ANYRES16=r1, @ANYBLOB="040c26bd7000fcdbdf25010000000000000009410000000c00180000000369623a00"], 0x28}}, 0x40000) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000480)={0x18, 0x0, {0x2, @dev={[], 0x21}, 'nlmon0\x00'}}) write$P9_RLERRORu(r2, &(0x7f0000000480)=ANY=[], 0xfffffe2b) r3 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r3, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={0x0, 0x4}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000380)=@sack_info={r4, 0x9, 0xff}, &(0x7f00000003c0)=0xc) r5 = socket(0x5, 0xf, 0x0) fsync(r2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000400)={0x3, 0xf, 0x4}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x4) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f00000004c0)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r5, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r6, 0x211, 0x70bd25, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}}, 0x20040044) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000005c0)) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000640), 0x4) sendto$inet(r3, &(0x7f0000000080)="df", 0x31c, 0x6200010, 0x0, 0x0) [ 2076.311634] misc userio: Invalid payload size 15:29:36 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x3c00], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:29:36 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000440)="afba03a6263db5d01036d46eaa274b981d7b9bb5955cb0bafb87", 0xfffffffffffffe72, 0x4000010, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:29:36 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x1e00}}}], 0xffffff76) 15:29:36 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = shmget(0x0, 0x2000, 0x78000040, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000480)=""/4096) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f00000000c0)=0x5) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:29:36 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x4000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2076.563502] misc userio: Invalid payload size [ 2076.644545] misc userio: Invalid payload size 15:29:37 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x11108}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x74, r1, 0x808, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8000}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:29:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2) 15:29:37 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x1f00}}}], 0xffffff76) 15:29:37 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x5800], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:37 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) getsockname$inet(r2, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x10) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000240)=""/136) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x7af) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:29:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = semget$private(0x0, 0x0, 0x2fe) semctl$IPC_RMID(r1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) getpeername(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000040)=0x80) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={0x0, @remote, @remote}, &(0x7f0000000280)=0xc) accept4$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14, 0x800) sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f00000002c0)=@can={0x1d, r3}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)="95990473f9db3d523bb64bb271d959d9a156c1db2f756c8992f17c6b1581205d8860723171361369b1", 0x29}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x178}, 0x200000c4) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000780)="b6cf85ef4ef09e5c3cd1c79822684cf1c322e87ef0d3f78ca1f5fd8cb67462dc6dd1b98892b4c41e501288a23abd0762d6dd4667e6dccde2de5f9db98dabc0493672ad65451ae3e5ffaa7ecea586427991dc1f9de3022227c63eb1999713b42575f948c4a1f2d64bff91874ccbd51f000000000000000000", 0x78, 0x6200810, 0x0, 0x0) 15:29:37 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x2000}}}], 0xffffff76) [ 2077.110799] misc userio: Invalid payload size 15:29:37 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x1000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0xa) 15:29:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) r1 = socket(0x5, 0x802, 0x2) setsockopt$sock_int(r1, 0x1, 0x400000015, &(0x7f0000000000)=0x76, 0x9e) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000200), &(0x7f00000000c0)=0x10) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in, @in6=@local}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1c00486}, 0xc, 0x0}, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000400)) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r4, 0x40106410, &(0x7f0000000500)={0x53, &(0x7f0000000480)="1c8d3d91c900ba263791fac1a67dd0796b67c4d3d1a37ddd5bd51e8b26ee3a7d7971da829827c0dfcb57a664814232dd9901156d22687b6826f56d96e8196ad29f59f1d8cbb767841531e188eded5d081f25f1"}) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r4, 0x5386, &(0x7f00000003c0)) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000040)=[{}, {}, {}], 0x0, [{}, {}]}, 0x98) 15:29:37 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x2000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:37 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x2100}}}], 0xffffff76) [ 2077.278216] misc userio: Invalid payload size 15:29:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd4(r0, &(0x7f0000000040)={0xfff}, 0x8, 0x800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x50, &(0x7f0000000100)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)=r1, 0x4) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e21, @multicast2}, 0xfffffdea) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000080)="df", 0x37b, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(r2, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:29:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0xf) 15:29:37 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x2200}}}], 0xffffff76) 15:29:37 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x3000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0xffffffffffffff8d) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x90000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x4}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x7, 0x1, 0x3, 0x75, r2}, &(0x7f0000000180)=0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000003c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xcc, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x1}}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="d60625c818478c7b9c5600271952ecc7"}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="90fe3fb266cbc0b5e62f6048be48cb60"}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendto$inet(r0, &(0x7f0000000080)="df", 0xfffffd15, 0x6200011, 0x0, 0x2b7) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000480)) 15:29:37 executing program 4: openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x200000, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x7, 0x40000) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="66b887000f00d845f4440f20c03501000000440f22c0b8010000000f01c166b8a5008ec0c7442400065c1495c744240200000080c7442406000000000f011c2466baf80cb85fd69483ef66bafc0cec460f0fcd1c400f22a00f22db", 0x5b}], 0x1, 0x1, &(0x7f00000002c0)=[@flags={0x3, 0x2}], 0x1) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r4, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000d4effc)=0x9, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffdb0, 0x80, 0x0, 0xe8612b355e45126d) sendto$inet(r5, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(r4, 0x5420, 0x0) close(r0) 15:29:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x5fa35506, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000240)="06d5e1d4ac5bdcc71e83c147d0ed84645a75cd2efe5a1fe15c51ff95b5a8d4249cd255e08ec9ec5a06ea7a83c8476656daf44c694386f266cac27250b11597b915df8252a45705018d7f24f8aac3e81ba614b4522d65264ba7b81e458242f95d999b1545970636006c8e28bc1b6f9be637e0a182b3cd9a6ecac89061c8ba7f7e182e175e05ed07830722a6b75d519dcf1cf9d190e070cb9eb30564c653fcc6997ffd5d0a109030fc77058f99a59514ba88982609cfe1c234038bc016ac80779d154c03d91cf60ad8822cfd809f7bed127aa4c08e88edbe1727dd5ce3c90b853bbcf0ac48688a1a8261697e0bbeea349f4eab25") sendto$inet(r0, &(0x7f00000000c0)="ad00c36edd16de2400ea88bd662727c5017975ffa60b49a125036c6b659a1f1965e8633cf76facfc363f2888e643821e57f1d13bdbeee700b78cf571e510b1a9893543a4f81f89833d6cf09e5e849f28c55528d2333dcf82a927c239d35f34cc562784ae51241ae548a0cd4dddf4d0b159458e340f2d1dcd58e7d2a8b54b2f22bd48dafc06d18782af3428cf4443e0f6384067f48580b18835cacc21a44f4aa0af1930dd856d5d0ac7c78ac901db92cef309527fe6ea867f4f438d06c5127de3a4", 0xc1, 0x620000c, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000001c0)={0x5, &(0x7f0000000080)=[{0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000340)={r2, 0x1}) [ 2078.006351] misc userio: Invalid payload size 15:29:38 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x6000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x14) 15:29:38 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x2300}}}], 0xffffff76) 15:29:38 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) lsetxattr$security_ima(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='security.ima\x00', &(0x7f00000002c0)=@ng={0x4, 0x8, "f2656f8c9e099916e090e9"}, 0xd, 0x3) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) getpeername(r3, &(0x7f0000000100)=@nfc, &(0x7f0000000040)=0x80) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:29:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0xe0500) connect$rds(r1, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) [ 2078.321731] misc userio: Invalid payload size [ 2078.440972] misc userio: Invalid payload size 15:29:39 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) prctl$PR_GET_KEEPCAPS(0x7) sendto$inet(0xffffffffffffffff, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000003c0)="791dff88498f665d422ee1ef2a68b9f04f7d0674a8351a6b6f17a81e452c6a1b6ef99bc043cb833cfcbf0d9bb910edb16aa5c3763554053fabe9a28508dde169c1cc09b3b6e74f") write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {&(0x7f0000000140)={0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0x1c, 0x1, @in6={0xa, 0x4e20, 0x8, @loopback, 0x9}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000100)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f0000000180), r1}}, 0x18) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:29:39 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x7000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:39 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) rt_sigpending(&(0x7f0000000040), 0x8) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000100)="df", 0xfffffe56, 0x6200010, 0x0, 0x292) 15:29:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0xf4) 15:29:39 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x2600}}}], 0xffffff76) 15:29:39 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) ioctl$void(r0, 0x10000000c0045878) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) [ 2079.086646] misc userio: Invalid payload size 15:29:39 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x33000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:39 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x313b}}}], 0xffffff76) 15:29:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0xfc) [ 2079.199315] misc userio: Invalid payload size 15:29:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x20000010) 15:29:39 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000080)="df", 0xfffffffffffffce0, 0x40, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:29:39 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0xf, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:29:39 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xbf00}}}], 0xffffff76) 15:29:39 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x3c000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:39 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000000c0)="b46c98f52a9c56c9690d4e8224044ecc112d5fec605cd5cbb3e7d837a172fd1bb2598948941b104065b18327c6e6baf10527d05a59badb509a213a481660ffdbd7452bd79ee7427c95b07732ace4eaf6229fc387d75a2c3e36ae487758d37c9d076c2c680226950bb0a03d3dbcba74f92abfb8b248", 0xd2fc5029383f82f1, 0x6200013, 0x0, 0x0) 15:29:39 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x40000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:39 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xf401}}}], 0xffffff76) 15:29:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000040)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x6, @link_local}, 0x7e, {0x2, 0x4e22, @broadcast}, 'team0\x00'}) 15:29:39 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xfffffffffffffff8, 0x20002) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) signalfd(r3, &(0x7f0000000100)={0x2}, 0x8) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:29:39 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x58000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2079.940167] misc userio: Invalid payload size 15:29:40 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x1000000}}}], 0xffffff76) 15:29:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socket$unix(0x1, 0x2, 0x0) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000180)={0x9, 0x100}) fcntl$setstatus(r0, 0x4, 0x400) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2, 0x0) ioctl$TCXONC(r1, 0x540a, 0x7) r2 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x100) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x9) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x280000) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) [ 2080.039222] misc userio: Invalid payload size 15:29:40 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x8dffffff], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) r3 = getpgid(0xffffffffffffffff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=r3) sendto$inet(r2, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000100)={0xf002, 0x6000}) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:29:40 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x4000000}}}], 0xffffff76) 15:29:40 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0xf5ffffff], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:40 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x4000000, 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{}]}) 15:29:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000080)=""/8, &(0x7f00000000c0)=0x8) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0xfffffffe00000000) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:29:40 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x5000000}}}], 0xffffff76) 15:29:40 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0xffffff8d], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:40 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) perf_event_open$cgroup(&(0x7f0000000100)={0x5, 0x70, 0x1, 0x5, 0x0, 0x80000001, 0x0, 0x4, 0x40204, 0x1, 0xed, 0x6, 0x4, 0x6, 0x1, 0x5, 0x1ff, 0x7ff, 0x1, 0x4, 0x9, 0xfffffffffffffd17, 0x400, 0x3, 0xff, 0xffff, 0x29, 0x80, 0xfffffffffffff001, 0x1, 0x2, 0xe45, 0x7fff, 0x100000001, 0x1, 0x6, 0x4, 0x7, 0x0, 0xbaa, 0x2, @perf_config_ext={0x7, 0x2}, 0x1000, 0x908e, 0x2, 0x7, 0x5, 0x5, 0x1}, r2, 0x5, r3, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x0, 0x0}, 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') mlock2(&(0x7f0000bbd000/0x1000)=nil, 0x1000, 0x0) sendfile(r5, r5, &(0x7f0000b58000)=0x200010, 0xffff) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r5, 0x0, 0x5807658) [ 2080.804888] misc userio: Invalid payload size 15:29:40 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x6000000}}}], 0xffffff76) 15:29:40 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0xfffffff5], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000040)={0x10000, {{0x2, 0x4e22, @broadcast}}}, 0x88) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:29:40 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000100)={0x8, 0x0, 'client1\x00', 0xffffffff80000002, "b2102f6b5d76deb4", "17df9891ec715196c54cef3782e2ced6ddaa347730c514e58d896094db0a0f64", 0x4, 0xfffffffffffffffe}) sendto$inet(r0, &(0x7f0000000040)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) [ 2081.070930] misc userio: Invalid payload size 15:29:41 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00', 0x2}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140)=0x1010100, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:29:41 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x100000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:41 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x8000000}}}], 0xffffff76) 15:29:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x101000, 0x0) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000080)={0xa, {0x10001, 0xfffffffffffff800, 0x7f, 0xfff}}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0xfec4) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x44040) 15:29:41 executing program 3: prctl$PR_GET_FP_MODE(0x2e) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x6, 0x80000) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000240)={0x10001, {{0xa, 0x4e22, 0xcac, @dev={0xfe, 0x80, [], 0x11}, 0x2}}, 0x1, 0x2, [{{0xa, 0x4e21, 0x20, @remote, 0x1}}, {{0xa, 0x4e21, 0x1800000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x40}}]}, 0x190) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000002500)={0x0, 0x0, 0xfffffffffffffe9f, {0x1000, 0x5004, 0x1}, [], "25e251f496d89df02448050b94f11bffc1ae28173bd6fd70c65f520fc5194366140b2b416459b75af81874d08d41176d1a1e49fba7ee1448d5e54abe559d18c28a1902f75cc8e6c81c2a7004c8e0cbe0e9624a9d9a6870e966e8272c07fe3f94ac8966bfe5441b692a0d3a5f767fc75e59e69d4936de19c9ff2711217fbef18e7672308830e4b7ed465098cbfece42e3e4e1a1b11b82f367c119cbae260195e77bac25183a461c1e5642b6f07fda4fdf1642ca7f423ee8a169b386700b1e3484c9d3fe3fd2edb43bff62f275d64e48afbe3b31e55086dbfee11223d1bd8a71a040c37f600e829d99013a10a8362838935116a1361a76ee171b65a094db9a8bbbd9f905f817e92fb98474dfd3987bc3e37f76f891734a8c09881972a1625e5b284d44d32d6508e72bd0b3c0aee490cd2b3e4bac9e3f800c11e440ac90e1cda6c8f041e42fb598f43b18303e059aa53739fdd32f63f738a02bf40bc8584645757b8860223387908a10adedc082584634eedd24e23a3b824c8796920f61f5822f679c96a357be3009d981b27057f8fd383397627aa1db55470d442a3f332fd6f0fd74740b55e04c29ccbf8be46ed24129cfcc3edb4c4df7576bbf27729895849a100ac473febdcb8012ab41a4400825531b0033a06d084f80e693a4f386508a06bff4c21a13d54152d88249e51bb0818bbf8ca7a60fa35935e73fade0b190cc5e7d5a92b6a3396f47af439f12fd40677486d3470c8ec85070156f8d7f148a443b30e7db532449cf83f1f22ac08091d757108677ded74bd7d51bbcc7789ad1dbef8510090c0e402a2a119389f15b7a83a9f95d1b4fc7c63b9428c473f9165d4a6144372ab1775e0a85015170fffc859b9cac48f909654793f3dd44a00b639da20cef4986e5924a46d278debecc70c5f410c0c24d9a5ad669c11d7437b52e0814fab6da5fbe11a5be51368fb5e7b8eb6c11d6d65933fdc09168608279f987e9175de2f3f7a70daaddd6947f39bc6323fef9b3c98d31bbd052bf3dc6362c6ff154926eeba196733596c8a913f24df80b1c4668066bb1bfe156c0778bf07f5d1760d6cb3e429be83878b1a750f33451bd9100e3462d90f575262383afa69188d48eaf23440f78f2de4f2c6ef781b150d115b6dc70ab5bb433cc6c1cf22d3a69b7ba0fea619c1915f1c1c5ec3621680d766b66ab5e0a0e05262a59e4960769c5f4f5478c79d314e03a10c79eb1dde59a78bca589927bfddedc66f2b0d10431aee01668c8eb94a6a7a4c79f04c1854c9b456a48d5df8b6a1447e33b0e900ffdd20b6b2c4abd957cfd510f09ec126fff0d744d8a763e3a81f199364961e37c75691031a100b3fa3b6d3943ddf0f714895b7c6b47c57e8a9bffcbdae6af1531aa145b21372d4b2c08d296259acc81f076609fc7458fe260acec5382bf94689fd6bcca4c4616354546fe0dd8ae2c36b36318f39cfbe7d503b59aa503f8c3539297745ae3021be479cefdfec5a60916539917d85f956f1806298bc720a104f04067cc0152a0756818516b588c011be560c5c1f0a3e20ebcc99254ddf7a9059a16d3f8d9d4e8c03d15ad47746ed99d83a804a92d687b1ad48662dc30ab26372c31f170dfb4ec8d65e6a046ad6057e4db9285c3853826ef40c96bf17f7ae25bcb3a1f1e7634ef59deec9aab3e72f5ce97826b7755b56589660c5d4339e637cd5f0b865d57d591c1a0f0b1e0fc1e379ad2e279fa05addeeafabc6083002c202190027826fd895a914b641ce5459e53c56ee2a270086ce1fa7ae586de3c5743fe04361e7e749a7e1feea07151aaa5b84f4a4f57c128dc231d6f6842078f763930a5303a4c30507eefde7c1060787b9778fd10f5ba735496cca615349e50bd036d4043c28b6c6bcd8110af7a5f228fc9b5f63e3973e947baa7e01ad832c219038d0b65bedc22c66e215158b1cbcc8e9ffaf8ce6891a7d9b72feecd0a236e98f188431531d938dd8cbf294c78402b5c191db9dd81c28595915c38c09ad3121a7c4a1216fb3d7d9523888c5ade5db34467187d34489589dddf4e64edf1c0d598568bd501485f6c9c42df5d7aed98530184e9ab45a6ff19fd5e233d9ece8e46eecf099f049059106e76c97ea064054aa030e2a7dd9ebd90465f3a1db67964c880ade3d56bb4addc34b79f8ff7e3d7ee4643556d044493cbff10bd5970920b88f3079ccbbfb968f3caddd618abd57b4a6d6730452f8bb7b77715fd7a797cdc3b5f2badaaa72451dcab82e1f8b1e8cbc4ea8a845eb7a36253b1faafe1bc9bcee2e2243254ccfa03bf305eefec2718e50b71453a406f7db1791eae442407f357cfc551f38c8f43c274a9f59ba8bcca09e915a208dcdd2c0938cd4ca5c653d83f61cd610a5e20aa8314260bf9748a2cf360143562aad7d7ebe060a4df511faebc545d4a012f512c216a729d1d631135662eaf35d934daaa75c8e8b71665c0571e437a38b11b9cb586b4058ac309dee57cee9ed3aa9b25c71692375db692ea92e37f2dfcfc1cc6fb15f280a03e26b761b8d6be4f456640e2096341be1eacdc3a1cbe2614a361f4619b685dc0b1ad0b518e29c08ed97e44babe15d1b4d793782fd6a76b8ff733bd55894112096062965fc17b8e249a8f4d172cbdbda5fdc77e90d28b760a8fbb7d3618fcd2d0e950530e46739a316e82ab8e23e0e34dce572f2ea85c44a2eb6b7bbbad01f70d8dc135676bd3673d4e03824ab6170b759eb1dd5b1bc7ec82e24b9f699974054f5c5440b3facf2b825748979393cacfcdec134dbdee0c64a141c769b4fab24f82f53803ea7a4af45742cf98e2d3fb22a28cea6d35a3fe203878ee65b3e25254a8e162dd01837b5d97f28e9c5f3a1c4562c384a4b2f7966be8e5c1966345acb5bfea1071474628e6457a30645c85f2d2ce042c187837502c492446ae9f4fa6a5201c9999868e1d420fbfe807f37a99c781fe507b9a977cf9c92edd0f9ecb2d8c9a3277f77d7976d84d36d4d27be5d0a14c2617dbfa28422872f90543fbf461745c35f4aa567e6b675e5693ff1002170d8f2a5ae25e963a7a37fd2e3c1481edbdb9667a2dab7916c375e71af632722517f587073d11a2cafe14e8f628d3266299ec6d4f99a920055171e19aef01bd4a6fb53018ef0e95dcf35dd724439b53c429bfb9132c32c860519ee1b0451a2d186193a6fc2b5bb93f9ce8e4d1125b577cf0be4a49b5771eb9a02814561b6febb09ef96e343b1c6250dc67f51238207361273fd74db197120ccccde1b01722b977230e1109be2d9ca372e875cb5c86c6f890ef3116617ea6e685067efff12467375dbb86dcf0b7c90856f32a5c9e8ea880248b8bdc35f789364fa46553a52631028b422d1d0adafda673d46afdd0e76d6670df73de7893d1e6926ed83ae74d5e351f9308222fc614a47f0abf4bf59b7960d8be3c36ab718856c854b542e8fa2a53a1944cdea90453e4a5bba8a56f8074852e78571e66ff8c30ef99a4350e5591e40796b4ecdfbecc28eee12c5ed107fd8f1b580584263681300e62e083b3677b3612f73c0a5c6cf21c2525ee55dc64972e217deaec671bc97262f28e6f28a4d03e0b3c8374b3bfb4e3f1fffa4eafe835eb8dd334b08da6ccea432e1353240a9fa377ad0d95fd709335932746cd15f4397791fbb4b70dae3082e89a1cd99f4b057dc71efef4e4b3d376bce03e1e63dd743226a04882c7bbd9aaede2e70f2f8f2d8ef41f3565fcb6ead2e6c275539e645003e3eced04cf5955d94034750b8c56b0e3fd30b7b487d937f403563b2ca2a8bee456b33ef3c73f703440e1d60fb8d043ed8120f731c5e1b428b6edd40c445c227b2b32dc8f7a21555015d1558f32198f42b5abe99ee83002b606403c8b5e425d29338645742c6fd31f0a1e46b3e7e2bd70fc670b901c97355439f078714494bbeb5382e957008fdf18331aadf592ed06622d3565e1143a422b0b2d60de09d1c5d6907c1d1e64b47cff52a630133dbe7e12dfeaab59f328f9911402e8277f57d200f5168fbeda179eab9627ce43f970ae781479df86ca6805ad73a7e4658e166abe1ef0335410539f8314b64e7359803fc40e8e965abbe82f3ad22cba34c1c7a2395ac2b3f1fe7efa8f227bd47e2f658b6d0afd966904aeb6a5ab416e51bedd181c5972c63a4ade9b9255e7f058cb6cb344b05a7a3d26854ad7eb12b7b3f81bf1161f59c9eeff9dda5f628ebbc1f5453308c6ea76d4237b2386368f38d599495fbb255601a83e469169c8e833f7c95a7c5f596b1439501d4d7917c188f6ce3d561a48e79f910e2b8fc681046446ab72cb5c917a3751c6da9aef69cc2633a2034cbdc79dedc471a97cef6cb20b1bababb43a733fae2041cb2e0c5aa430a30b19d16954e6df023220ec2acd33c3d1847caaa7909ecff6ff6546a194db689f02160d0a5f5475faa164e713c53690830f04fe5c8f6ccd98433e230188d37268e680de3e606a19e76857b06291b48eb76949e9724b4491ef2984706791d809e7860904d77287c4b567f8926a7922fe4e90dd40f6918c996782cda6566b00d4d340db9c43713e4e99728b8201c1bdf879284cba5567223db6db036c33b53bcff03600d18ab8a9e8a68bd703fdbd2a928f11c5ec08790aadb5e7320dd0d9fd2915ced8124da346ed343082e22e2d3f7776cbda81b33dc312d26d9ea6b01cd219369c3ba5e4ebd430da3b64c2cbf11fd2676f2e628e1bf1d1740ae5d6ebc38bbc29625f9397f7e43c162bd2e7c641afdd201b7c5d65243f3961ec89217c09e567de7f7a0f98aef2cc045be07a81e4c0e7b7ffe020decf35e4f218c0c99b8fc58937b32242bcdaa24bb8439c314bfb19e774500dff351161602f762632c7003d4ab585ac425a20c4580acfaf4ed96c3e4cb0cceb981b4230a6b4e8bb09e509fd37b49d0436c035569b27fddd888e85a5d2018d749c63e5aa99114c648900fc50e0744da75e86565b9709199464c25402a5fe55c26ddc874f12ec55427daf3f2b7b516c2ae2457a4044f79482c462b7ca56f581821ce2a71d8413ba7b59cd40e4f27091bdf1a00c06b2126f48fd083fd8930e7bd0436bcf62a853565eeaf85a29f56cb0cee988e41c9a0fba9b4f9ed4f7838683dfbeec020c1d8c33794bfe87c9a6ab5d7296a64dc4d1488c7b50a2806d2c13504bd6a113e64492dff6cfe34e0af38abb4b9ee77cbdfa569c94af364e9be134e2675db6fc89c28d8372a88cf02bbcf28e2276541cf163924f6250fffbc40fcf322f54d3f9efba57701651e3b4d5dd4ec7daf6f76fb82b4719cfcfcf1c998046b89b60c62d03eede6620de1061f80eb8826cb3fdcdfe910168fcc71bb58a0749be3719aacbe84bc18d89fbf59b5dea2b085a9ae0644b047ae5e7acf6d13d7a0c2eac2073d214a7c6c53bd92f628c9d96d01dc58e01f6b6f69e3c7c1a8a395e1abd4b1358c249bd8e15db7cb3430ec8ca0f4d5afb14b708342b5a5ca722edb807319dd6639291d28141c76b299bfd0c525e962c6133f0414d0e16a8793dff3f7186df25d46a5f963ee6332b6c759aa4c94ef530c27543c07ff6a1c2c003207162b81dd9b9d84d31053c728073c10bc4439476fe559a389fee5f6a38e93bcd4cd86eec879b9456534f1b70df5ae563a28f4942c802c5c5f41537ea9836a39c8cdd2fe7b8c52d54aa4308e26b5f94a5d13369fb583b6878940400006cd92a486d5fc682a2c55e2d2d08279ac4c859ff408df601913a00", "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"}) 15:29:41 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x195) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$rxrpc(r2, &(0x7f0000000040)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x1f, @dev={0xfe, 0x80, [], 0x20}, 0x7}}, 0x24) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000100)={0x0, r1}) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:29:41 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x200000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2081.272745] misc userio: Invalid payload size 15:29:41 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x300000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x273c4ccc0a4d6333, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x7, @rand_addr="2054c51c818352edef6b25c8569b630f", 0x6}}, [0x400, 0x0, 0x2, 0x100000000, 0xed8, 0x0, 0xb7, 0x3, 0x9, 0xa999, 0x1a, 0x5, 0x7, 0x8001, 0x100000000]}, &(0x7f0000000180)=0x100) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={r2, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0x2, @mcast1, 0x81}, @in6={0xa, 0x4e22, 0x6, @remote, 0x9}]}, &(0x7f0000000280)=0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:29:41 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x9000000}}}], 0xffffff76) 15:29:41 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) getpeername(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}}}, &(0x7f0000000040)=0x80) accept$packet(0xffffffffffffff9c, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in=@local, 0x4e20, 0x7ff, 0x4e23, 0x0, 0xa, 0x0, 0x20, 0x84, r2, r3}, {0xe83, 0xfff, 0x0, 0x9, 0x0, 0x6, 0x800, 0xb}, {0x9, 0x80000001, 0xfffffffffffffffd, 0x4}, 0x10000, 0x6e6bb4, 0x3, 0x1, 0x2}, {{@in6=@empty, 0x4d3}, 0xa, @in6=@local, 0x34ff, 0x0, 0x0, 0x1, 0x100, 0x2, 0x400}}, 0xe8) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) [ 2081.448134] misc userio: Invalid payload size 15:29:41 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22003, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) ioctl$VIDIOC_S_PRIORITY(r2, 0x40045644, 0x3) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) close(r2) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x240800, 0x0) splice(r4, &(0x7f0000000100), r3, &(0x7f0000000140), 0x1, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:29:42 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0xffffffffffffffa6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:29:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000000c0)={0xff}, 0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:29:42 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x600000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:42 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x1e000000}}}], 0xffffff76) 15:29:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r1 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x2, 0xc0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240)={0x0, 0xa5, "c0ea9ce125de47376bfcec64e37a15c7301031391ac5fb4df4252693fefd1cc4fe7e4c1d6c21ca9a3a46eba505d1fef1d3a040fd61f358e0ad8901a3d41a99090829e3add2889cd516b49576ce1d12f8a3076af7792135adee7a5b325ac028eb64168e4612d3dfd871d6b9dc340824ec5bffd6e083c7abaa5d5515ad8556832ada9d8dcae90df24fc3a2606a718cbe5afe3c444132895a6252ed0ee042702944933e3180d1"}, &(0x7f0000000300)=0xad) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000340)={r2, 0x8}, &(0x7f0000000380)=0x8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20\x00', 0x101000, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000400)={0x3a, @local, 0x4e24, 0x2, 'lblcr\x00', 0x4, 0xf39c, 0x9}, 0x2c) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000040)={0x8, @dev={0xac, 0x14, 0x14, 0x25}, 0x4e20, 0x1, 'lc\x00', 0x8, 0x2, 0x1b}, 0x2c) setxattr$security_smack_transmute(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x3) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x101000, 0x0) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000480)=""/4096) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:29:42 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = open(&(0x7f0000000280)='./file0\x00', 0x600080, 0x100) ioctl$VIDIOC_RESERVED(r1, 0x5601, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r3, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x9, &(0x7f0000000100)="80000000") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000240)) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x275) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) accept4$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000140)=0x10, 0x80000) sendto$inet(r5, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(r3, 0x5420, 0x0) close(r4) 15:29:42 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x1f000000}}}], 0xffffff76) [ 2082.183771] misc userio: Invalid payload size [ 2082.198904] IPVS: set_ctl: invalid protocol: 8 172.20.20.37:20000 15:29:42 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x700000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x6) 15:29:42 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) ioctl$CAPI_INSTALLED(r0, 0x80024322) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) [ 2082.293612] misc userio: Invalid payload size 15:29:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x117d, 0x480) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x1008}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000240)={0x15, 0x110, 0xfa00, {r2, 0x100000001, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e24, 0x2, @loopback, 0xa7d}}}, 0x118) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:29:42 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x20000000}}}], 0xffffff76) 15:29:42 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000280)=0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000240)={0x5, 0x10, 0xfa00, {&(0x7f0000000600), r5, 0x2}}, 0x18) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x7af) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:29:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r1 = dup3(r0, r0, 0x80000) ioctl$TCSBRK(r1, 0x5409, 0xffffffff) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000040), 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:29:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="04a5eeb9d00941781ec4759785764b81a67a4fca329031e89a1d99b3389319fd92111650dd5d6d169dbd14c7ac97461fd6d521bb2e2d957ac5ae3b95b0ee86209dc94be2005c2b37e69366c35c5d7423d510a7c9b150", 0x56, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:29:42 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x3300000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2082.518147] misc userio: Invalid payload size 15:29:42 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x21000000}}}], 0xffffff76) 15:29:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e1d, @multicast1}, 0xfaafd9f7) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) 15:29:42 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2000000000, 0x420000) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000080)=0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x9}, 0x10) 15:29:42 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x3c00000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2082.650669] misc userio: Invalid payload size 15:29:42 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000040)) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:29:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x1000008e8f, 0x4000082000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x790a, 0x5}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={r3, 0xfffffffffffffffe}, 0x8) sendto$inet(r2, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000180)=0x3) 15:29:43 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x22000000}}}], 0xffffff76) 15:29:43 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0xffa, 0x10000) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000380)={'rose0\x00', 0x7fff}) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000100)=0x3) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, 0xfffffffffffffdc9) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000280)="7ede4bf3307b442d080a60274fc5a3394089d41d5788c5ca6f31ae14dd96646eb1f1aae9c878518b6ca5e1928d2b65361e8a311e1895c6c1b7daf1de03e6b136ee5e4e923dda140edb58cb0edc0cf8f4780501ac2371d190834585235b95999d2e18d2f3d0028e2ee78ed219c7c63c997090135dc77c8275ea2d8d29d394c0fb6c0796714c60def65b10fd71d1f422014119ce89f1eafa9943df592a21a2d460fa285a851b8ce52815a7ac4ea3907bea8588f16f8d640c3adc9c139cb696dad6f51aeef7878a773a", 0xc8) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000140)={0xffffffffffffc05a, {{0xa, 0x4e20, 0x1, @ipv4={[], [], @remote}}}, {{0xa, 0x4e24, 0xfffffffeffffffff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}}}, 0x108) accept(r0, &(0x7f00000003c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000440)=0x80) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000080)=0x9, 0x4) 15:29:43 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) r5 = getpid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0xc) kcmp(r5, r6, 0x2, r3, r2) sendto$inet(r4, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:29:43 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x4000000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xa) syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x9, 0x200000) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f00000000c0), 0x4) 15:29:43 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000000c0)=@llc, 0x80, &(0x7f0000001240)=[{&(0x7f0000000140)=""/185, 0xb9}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/53, 0x35}], 0x3, &(0x7f0000001280)=""/234, 0xea}, 0x40000000) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000013c0)={0xb05c, 0x5, 0x100000000, 0xfffffffffffffffd, 0x4, 0x3, 0x10001, 0x9, 0x67, 0x100000001}) [ 2083.325395] misc userio: Invalid payload size 15:29:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r2, 0x80000001}, &(0x7f0000000180)=0x8) 15:29:43 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x5800000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:43 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x23000000}}}], 0xffffff76) [ 2083.448385] misc userio: Invalid payload size 15:29:43 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x8dffffff00000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:43 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x25dfdbff}}}], 0xffffff76) 15:29:44 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000080)=""/174) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:29:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x4000, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f00000000c0)=0xf4240) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:29:44 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0xf5ffffff00000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:44 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x26000000}}}], 0xffffff76) 15:29:44 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0x290, &(0x7f0000000040)={@broadcast, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xf402, 0x0, @remote={0xac, 0x1c}, @local}, @igmp={0x12, 0x0, 0x0, @broadcast}}}}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='vca\x850\x00\x00\x006\x00', 0xf7) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x100, 0x100, 0x100, 0x0, 0x100, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, &(0x7f0000000040), {[{{@ip={@multicast1, @local, 0xffffff00, 0x0, 'bcsf0\x00', 'ip_vti0\x00', {}, {}, 0x7f, 0x3, 0x40}, 0x0, 0x98, 0x100}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x80000000, 0x2, 0x101, 'snmp_trap\x00', 'syz0\x00', 0x8000000000000000}}}, {{@uncond, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0x0, 0x0, 0x3, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7fff, 0x16, 0xfffffffffffffff8, 0x81, 0x341, 0x35, 0x5, 0x4]}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000100)='syz1\x00') sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000d40)={{{@in6=@initdev, @in=@multicast1}}, {{@in6=@loopback}}}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x3) write$binfmt_script(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="2321202e2f66696c6530202357994f66e76f4d"], 0x13) close(r2) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:29:44 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000000040)=0x2, 0x4) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000100)=0x9, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) [ 2084.166934] misc userio: Invalid payload size 15:29:44 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0xffffffff00000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:44 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000340)='/dev/admmidi#\x00', 0x100000001, 0x4000) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f00000003c0)={0xa, 0x3, 0x2, 0x1, 'syz1\x00', 0x3}) setsockopt$inet6_buf(r0, 0x29, 0xfe, &(0x7f0000000380)="e6a7a12a64d48f41f90130b207c2", 0xe) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @remote}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2100, 0x82) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000180)={'icmp\x00'}, &(0x7f00000001c0)=0x1e) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000100)=""/64) write$eventfd(r2, &(0x7f00000000c0)=0x4, 0x8) sendto$inet(r1, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) eventfd2(0xff, 0x800) sendto$inet(r2, &(0x7f0000000240)="65a42b700feb78ac7e9cd40d96cc7c183d607f7b7fe445cdefb0b930046b702b81b319d3386d8819f4d2216eab4b990ee395cbf954d5e40df642a6c56a01a44061a330ca1691ca202af38ba9067382b9934ab74ae05e7cd92b66b86abccc8101a85f5dd7491c5f18ed28327404f6987bb95bbdcc9210f92342914fc8d9c212c52964b83e83f6fff2c23428de1ba2505be2e020f5cc07f73354e4ebdceab1eaf19b50297bea069e3923a9f5831e8ee8cfd3b3d1f065623052b6b57faa7bffc7378fbe02b832b0338bce0532e89618870c969b719927ebf4720171980ddb4f17933d162fa64208ca948380fa2d", 0xec, 0x80, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) [ 2084.245560] misc userio: Invalid payload size 15:29:44 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x3b310000}}}], 0xffffff76) 15:29:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x280c1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) open$dir(&(0x7f0000000100)='./file0\x00', 0x4c002, 0xad) 15:29:44 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x1000000003e, &(0x7f0000000040)=0x10001, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x1ac) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:29:44 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0xffffffffffffffff], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2084.397056] misc userio: Invalid payload size 15:29:44 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x95ffffff}}}], 0xffffff76) 15:29:44 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x40, &(0x7f00000002c0)="0326b53694a277dc0b852848703b6e07da0eef403bc3c628") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0x7, 0x4, 0x10, &(0x7f0000ffa000/0x4000)=nil, 0x1}) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x4000, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000240)={0x4, 0x623, 0x10000, 0xfff, 0x1a, 0x3, 0x8, 0x9, 0x79}) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) open(&(0x7f0000000140)='./file0\x00', 0x40000, 0x62) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:29:44 executing program 3: r0 = gettid() ptrace(0x4207, r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x8bd9, 0x800) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0xb) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r1, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000000c0)="9b", 0xb5, 0x6200010, 0x0, 0xfffffffffffffdb4) 15:29:44 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x4e21, @multicast1}, {0x307, @random="a6f4882c887c"}, 0x20, {0x2, 0x4e20, @broadcast}, 'ip6gretap0\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) [ 2084.573800] misc userio: Invalid payload size [ 2084.697022] misc userio: Invalid payload size 15:29:45 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) getpeername(r0, &(0x7f0000000100)=@xdp, &(0x7f0000000040)=0x80) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:29:45 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:45 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xbf000000}}}], 0xffffff76) 15:29:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x3, 0x80100) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="d8f540970100"], &(0x7f0000000100)=0x6) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:29:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x100) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x3}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:29:45 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000040)) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) [ 2085.101832] misc userio: Invalid payload size 15:29:45 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x3], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:45 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xf4010000}}}], 0xffffff76) 15:29:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) setsockopt$inet_dccp_int(r1, 0x21, 0x0, &(0x7f0000000080)=0x5f6125c9, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) [ 2085.202935] misc userio: Invalid payload size 15:29:45 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200, 0x0) ioctl$sock_proto_private(r0, 0x89ed, &(0x7f0000000240)="71511a08cc72fa567f0462658afae086710e395dd0ecfbe9c0be6fd7ef150b3cf3f1a18ecf9b257d5f46fa830c153e30fd49d9b01de1fa43a060cefe511152fa8d01b2543505d67daeaf44e82df6795a1bd874ca53a593ae5048ca60c2b0cc3962fac9be3189008070339ea6518afde72b9476ca3ef336448b22d63360da64588f5f52e8975f56fa226041c337811cc9213c53af1eda8c9dcd5eeebf45c062292d9f0d28ed7d786d1526a5500cd6d2fee34250b9f59178a9d8d5d48b45fe9b1fb8dacc60") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0xf) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f00000000c0)=""/110) sendto$inet(r1, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:29:45 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x6], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:45 executing program 4: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x6, 0x8}, 0xc) fsetxattr$security_ima(r0, &(0x7f0000000100)='security.ima\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="03000600000003ff00a3b6e636b949227034d812391448a45ab93385530d436da68f2f65585b57330c4826568d2ab0a7369e10f9de3bd334ba804bf890c49c0b261043ace5431eeb7a85c1ea7f6f0fca21bbf0292cccd76de4d901e91e25dec9f94e40e8e65b8a4e4692aa7a50551f1ae93fcd7006000000a78b2e70416b8375588e5ffcf1742fbb0129751f47ec96da1d2b3e69edfbe2c12feddcf33ac12cb69ee2937c817c14a9756839f8ab"], 0xad, 0x1) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r3, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IMCTRLREQ(r3, 0x80044945, &(0x7f0000000140)={0x250, 0x2, 0x1000, 0xbcd}) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r1, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r1) [ 2085.383644] misc userio: Invalid payload size [ 2085.452797] misc userio: Invalid payload size 15:29:45 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x400880, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000440), &(0x7f0000000480)=0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0xfffffffffffffe56) 15:29:45 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xfdffffff}}}], 0xffffff76) 15:29:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}}, 0x0, 0x4, 0x0, "904f6c84f0422a136967cdf27598bd453640ff8532d8da44559250cea417791a79dfcb35eaa3bf82a3e7f62e9601ef1f4dc56090af4b67041b7ffd8236af7b84dffaf177e1c0ab6014caf39b8dc02cdf"}, 0xd8) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x201, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000240)={{0x7fff, 0x8f8}, 'port0\x00', 0x10, 0x42, 0x9, 0x80, 0xfffffffffffffffe, 0x3, 0x20, 0x0, 0x3, 0x7fff}) 15:29:45 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x7], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:45 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) sendmsg$alg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="6a278f55223aad0ff66b706bb891ee5d0899732ed8616b17a099ec48ff213c429ef68c3673f171f842957c3ff9a6f675f85b0c25dc40c7d1e46dd11d2047cf0b37178c271463d0d47edd90b4ff018d18d51b3d40ce3ff90e83fb956875354bd13f1aadef93e0e193df53febdfd", 0x6d}], 0x1, 0x0, 0x0, 0x4}, 0x8000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000280)=0x100) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:29:45 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x4009) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:29:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000000c0)="a14fa38db5c485c69dd07253c7000000c1d01f06d05a822e496abe4638ee213573", 0xd, 0x6200010, 0x0, 0x0) [ 2086.060150] misc userio: Invalid payload size 15:29:46 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x33], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:46 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xfeffffff}}}], 0xffffff76) 15:29:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xd0000, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f00000000c0)={0x5fe, {{0xa, 0x4e23, 0x80000001, @ipv4={[], [], @remote}, 0xffffffff80000000}}, {{0xa, 0x4e20, 0x40, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xc}}, 0xfffffffffffffe01}}}, 0x108) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) [ 2086.173323] misc userio: Invalid payload size 15:29:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x109002, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000080)) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:29:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80000, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x40, 0x2, 0x3}, 0x10) sendto$inet(r0, &(0x7f0000000440), 0xfffffffffffffd5c, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:29:46 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1000000000000}, 0x261) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x800}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000280)={r3, 0x9, 0x8}, 0x8) setsockopt$inet_int(r2, 0x0, 0x22, &(0x7f0000000040)=0xfffffffffffffffd, 0x4) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:29:46 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x3c], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:46 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xffdbdf25}}}], 0xffffff76) [ 2086.345265] misc userio: Invalid payload size 15:29:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x30000) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) [ 2086.422965] misc userio: Invalid payload size 15:29:46 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xffffff95}}}], 0xffffff76) 15:29:46 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x58], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:46 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000240)="085e2a9707979dd304080000000000008dd2c15d238c01b6070000001000e9aac0c8a89c44ce48742f6aecfd45e8da17680d0b7a6b61223f452369cd34a79b5df8072079aff09b6691dc6d8ba81c129f4158e47999ff1d84f097db08b3485ad09ceded648a60b7ac3b82b051633e011bcc58a0baa5bad4a350e26176dc5112215b5160c377eb416df23e7a5b907bcdb2d2db84806349a4fa07b249f8b1db7d59ce1fd3e21f9a9678c8d0") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x194) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000140), 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000100)) write$USERIO_CMD_SEND_INTERRUPT(r3, 0x0, 0xfffffffffffffd53) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:29:46 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x4000, 0x1}) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:29:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x9, 0x40100) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000180)="ccc2f1a2fc837b24ad75402ba3af7e4b6193124442bcd10d2096fa88e7fa31cccb85dadf85336a74e98f4fdbd6d5f99f62b50295780035cec4bef35e2f31") getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @broadcast, @loopback}, &(0x7f0000000240)=0xc) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000280)={@multicast2, @empty, r2}, 0xc) lsetxattr$trusted_overlay_redirect(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x3) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000380)=0xfffffffffffffffb) connect$tipc(r1, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x4, 0x2}}, 0x10) r3 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x9, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x1, 0xffffffff, 0x6, 0x3, 0x92e}, 0x14) [ 2086.927564] misc userio: Invalid payload size 15:29:46 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x300], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:47 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xfffffffd}}}], 0xffffff76) [ 2087.017084] misc userio: Invalid payload size 15:29:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) lsetxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x3) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x40, 0x0) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f00000000c0)) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000001c0)={0x40, 0x200, 0x2, 0x7, 0x1ba, 0x4}) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000002c0)={@mcast1, 0x0}, &(0x7f0000000300)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80020800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@newtclass={0x2c, 0x28, 0xb, 0x70bd28, 0x25dfdbff, {0x0, r2, {0xffff, 0xfff1}, {0xb, 0x6}, {0xffff, 0xd}}, [@TCA_RATE={0x8, 0x5, {0x0, 0x40}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000240)) 15:29:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400000, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000080)) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f00000000c0)={0x9, 0xfff, 0x9}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:29:47 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) connect$rxrpc(r3, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x3, @mcast1, 0x5}}, 0x24) ioctl$NBD_SET_SIZE(r3, 0xab02, 0x7) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:29:47 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x600], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:47 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xfffffffe}}}], 0xffffff76) 15:29:47 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x313b00000000}}}], 0xffffff76) [ 2087.205668] misc userio: Invalid payload size 15:29:47 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x700], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000000c0)={[0x4, 0x7, 0x9, 0x1, 0x8, 0x6, 0x4, 0x7, 0x3, 0x0, 0x9, 0x3, 0x9, 0x467, 0x5, 0x4b41], 0x3000, 0x5000}) [ 2087.373503] misc userio: Invalid payload size 15:29:47 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x100000000000000}}}], 0xffffff76) 15:29:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000100)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80010}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xb0, r4, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3f}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @multicast2}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044810) accept$packet(0xffffffffffffff9c, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000ac0)={'eql\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000c80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10c, r2, 0x110, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0xf0, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r8}}}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:29:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x0, 0x4, 0x4fc) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x2}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000000c0)="df", 0x1, 0x6200010, 0x0, 0x0) 15:29:47 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffe30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140)) r0 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x8e8f, 0x3ffffe) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(r0, 0x5420, 0x0) 15:29:47 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000100)) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:29:47 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x3300], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2087.934734] misc userio: Invalid payload size 15:29:47 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x3c00], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:47 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000040)=""/254, &(0x7f0000000140)=0xfe) 15:29:48 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x400000000000000}}}], 0xffffff76) 15:29:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8936, &(0x7f00000000c0)={'veth0_to_team\x00', @ifru_data=&(0x7f0000000040)="a8f8bdd9bd1e3ce28fa0a8dd7c41e910bc568c2db255795eb5290b576297e8f6"}) sendto$inet(r0, &(0x7f0000000400), 0x0, 0x6200010, 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x8da2, 0x20000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@ipv4={[], [], @empty}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) r3 = geteuid() sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001800020026bd7000ffdbdf251d01030008000e00", @ANYRES32=r2, @ANYBLOB="18000200040000800402000088cf1e604c0fd7760200000008000e00", @ANYRES32=r3, @ANYBLOB="18000400030000a008000000140ea733247d4ae00100000008000d0003000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000) [ 2088.054790] misc userio: Invalid payload size 15:29:48 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x4000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x42, 0x4) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e24, 0x1, @loopback, 0xff}, {0xa, 0x4e24, 0x1, @mcast1, 0x1}, 0x2, [0x20, 0x1, 0x4, 0x2, 0x3, 0x7, 0x9f, 0x7]}, 0x5c) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000080)) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:29:48 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x500000000000000}}}], 0xffffff76) 15:29:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x100000000004e24, @remote}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:29:48 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:29:48 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x1}, 0xff81) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)=0x0) syz_open_procfs(r3, &(0x7f0000000240)='net/ipx\x00') r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x40800, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000100)=@int=0x8001, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:29:48 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x5800], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:48 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x600000000000000}}}], 0xffffff76) 15:29:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x4080, 0x0, 0x0) 15:29:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4620, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) sched_getscheduler(r1) [ 2088.892983] misc userio: Invalid payload size 15:29:48 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x1000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x3e, @multicast2, 0x4e24, 0x4, 'nq\x00', 0x10, 0xbd70, 0x74}, {@rand_addr=0x401, 0x4e20, 0x4, 0x2, 0x2, 0x1}}, 0x44) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:29:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x10000, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x100, 0x2, {0x1ff, 0x5, 0x0, 0x4}}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:29:49 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x800000000000000}}}], 0xffffff76) 15:29:49 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x2000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2089.056180] IPVS: set_ctl: invalid protocol: 62 224.0.0.2:20004 [ 2089.093412] misc userio: Invalid payload size 15:29:49 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x900000000000000}}}], 0xffffff76) [ 2089.122930] IPVS: set_ctl: invalid protocol: 62 224.0.0.2:20004 15:29:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffe66) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:29:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x84e20, @multicast1}, 0x10) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x20009, 0x300) r2 = getpgrp(0xffffffffffffffff) fcntl$setownex(r0, 0xf, &(0x7f0000000280)={0x3, r2}) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000000)=""/62, &(0x7f0000000240)=0x3e) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x1, 0x0, "9003449240d70df505b9ae6c77f71711f6f2132070ddd2ee5e80e7dd718d6681dda7dba9fdc9f0cfe4e33e11591e7e855f13720285b40ea7599276e4d2920d5035f9341ab4f9d325c25eb2150770e545"}, 0xd8) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0xffff, 0x1, 0x100000000, 0x7, 0x2}, 0xc) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f00000001c0)={0x3}) 15:29:49 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x3000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:49 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000240)={'nat\x00', 0x2, [{}, {}]}, 0x48) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000100)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0xffca) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000040)) 15:29:49 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video37\x00', 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x2) r2 = request_key(&(0x7f0000000100)='syzkaller\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0) r3 = add_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r2, r3) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x8000, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$BLKBSZGET(r4, 0x80081270, &(0x7f0000000300)) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:29:49 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x1e00000000000000}}}], 0xffffff76) [ 2089.836006] misc userio: Invalid payload size 15:29:49 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x6000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:49 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x1f00000000000000}}}], 0xffffff76) 15:29:49 executing program 1: getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x200}, 0x246) 15:29:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x34f) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000000c0)="e89c8e16d2736342353dd0dab169cb5d47da859b9592d271c1bdceebd4c67659bfae547a7efcb70c7d0d300b7354e8b47a4cc6b4251ccc1cfaa35a374fce1aa242e2caad871e84b375e7fde1c64a9e4641747afcabcf16636b9f", 0x23bb9733ae066c28, 0x6200014, 0x0, 0x0) 15:29:49 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x7000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:50 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040), 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) [ 2090.022728] misc userio: Invalid payload size 15:29:50 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x33000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:50 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000740)={'batadv0\x00', 0x0}) stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000380)={0x8, [0x9, 0x4, 0x8001, 0x5, 0x0, 0x4, 0xfffffffffffffff8, 0x0]}, &(0x7f0000000400)=0x14) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6=@remote, 0x4e21, 0x9, 0x4e21, 0x3ff, 0xa, 0x20, 0xa0, 0xef, r1, r2}, {0x0, 0x2, 0x5, 0x1000, 0x7fff, 0x200, 0x1, 0x1003}, {0xaa, 0x4, 0x1f, 0x6}, 0x4, 0x6e6bb8, 0x1, 0x0, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d5}, 0xa, @in6=@empty, 0x0, 0x3, 0x3, 0x5, 0x8, 0x7fffffff, 0x100}}, 0xe8) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x18}}, 0x7d6cee20dadf71aa) sendto$inet(r0, &(0x7f0000000140)="af", 0x0, 0x40, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000)="d04e9d", 0x3, 0x0, &(0x7f0000000240)={0x2, 0x4e21, @multicast2}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/btrfs-control\x00', 0x200000, 0x0) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x804a1}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000600e2946820b4e8522ea220000000400000100e5dfce8fb0ad2a75faebd30c9c4df02a5a03c6f450e9542fab6e5e42c2af60406116fea512bea8907855bc89ca91efe8287c62feb1db6252d51f96978d1fb27ce3f900000000", @ANYRES16=r6, @ANYBLOB="000023d854e303ab16a0406055ab"], 0x30}}, 0x20000000) close(r5) sendto$inet(r0, &(0x7f0000000440)="df", 0x1, 0x6200010, 0x0, 0xffffffffffffff22) 15:29:50 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x2000000000000000}}}], 0xffffff76) 15:29:50 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=@gettaction={0x6c, 0x32, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x9, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0x10, 0xd, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x6, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x13, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x4) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) [ 2090.386535] misc userio: Invalid payload size [ 2090.416641] misc userio: Invalid payload size 15:29:50 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) getsockopt$packet_buf(r0, 0x107, 0x9ca1cee0704374dc, &(0x7f0000000480)=""/4096, &(0x7f0000000040)=0x1000) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:29:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x6, 0x12) 15:29:50 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x3c000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:50 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept4(r0, &(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000240)=0x80, 0x80000) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x1000, 0x200) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'gre0\x00'}, 0x18) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0xfffffffffffffddc) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x251) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000001500)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000100)=0x1008) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000002c0)={r2, 0x8000089}, &(0x7f0000000280)=0x8) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) 15:29:50 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x2100000000000000}}}], 0xffffff76) 15:29:50 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r2, 0x0, 0x6120bc34b1b0063e) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) [ 2090.778094] misc userio: Invalid payload size 15:29:50 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x57, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="b4010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1b4}}, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0xfffffcaa) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000080)="dd", 0x1, 0x6200010, 0x0, 0xfffffc74) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000001c0)={0x8000, 0x9, 0x1, 0x1}, 0x8) 15:29:50 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x40000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0xd, 0x3, 0x4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={r2}, 0x8) getsockopt$inet_dccp_int(r1, 0x21, 0x1f, &(0x7f0000000480), &(0x7f00000004c0)=0x4) fcntl$dupfd(r1, 0x0, r1) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x104e25, @dev={0xac, 0x14, 0x14, 0x18}}, 0x8b) 15:29:50 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x2200000000000000}}}], 0xffffff76) 15:29:50 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x58000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2090.916687] misc userio: Invalid payload size 15:29:50 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x100000000, 0x80c0) write$cgroup_int(r1, &(0x7f0000000100)=0x2, 0x12) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x10004e1c, @local}, 0x3) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x9) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:29:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) preadv(r2, &(0x7f0000001740)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000080)=""/30, 0x1e}, {&(0x7f0000000240)=""/66, 0x42}, {&(0x7f0000001480)=""/206, 0xce}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f0000001580)=""/253, 0xfd}, {&(0x7f0000001680)=""/176, 0xb0}, {&(0x7f0000000300)=""/36, 0x24}], 0xa, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000100)="3334054fb87918d4bf41fe83d00bd8eb452fc7230598c787efe104b676bedcec1ec22756cf1cd108fb0d36118e72d5782a72ee9a2072e4805e6893e21dc5b4e3277d3a7946", 0x0, 0x6200010, 0x0, 0xffffffffffffffe2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(r1, 0x5420, 0x0) 15:29:51 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x2300000000000000}}}], 0xffffff76) 15:29:51 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000240)=""/148, &(0x7f0000000040)=0x94) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:29:51 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x8dffffff], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x80, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000140)=0x68) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000080)=0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:29:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x5, 0x658, [0x20000480, 0x0, 0x0, 0x200004b0, 0x200007b0], 0x0, &(0x7f0000000040), &(0x7f0000000480)=[{}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x3, 0x40, 0x0, '\x00', 'team0\x00', 'nlmon0\x00', 'lo\x00', @remote, [0xff, 0x0, 0xff, 0xff, 0x0, 0x12ecb3389529c9ff], @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0x70, 0x108, 0x140}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x2, 'syz1\x00', 0x4}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x500000000, 0x80000001, 0x5}}}]}, @arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xffffffffffffffff}}}}, {{{0x5, 0x10, 0x18, 'hsr0\x00', 'bond0\x00', 'ip6erspan0\x00', 'veth1\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0xd8, 0x158, 0x190, [@cluster={'cluster\x00', 0x10, {{0x6, 0x6, 0x8}}}, @m802_3={'802_3\x00', 0x8, {{0x8e, 0x1, 0x2, 0x4}}}]}, [@common=@ERROR={'ERROR\x00', 0x20, {"d2a160f7230c386e5f3aa120fc6e8ebc626dfc986c700675532e3c235768"}}, @snat={'snat\x00', 0x10, {{@broadcast, 0xffffffffffffffff}}}]}, @arpreply={'arpreply\x00', 0x10, {{@dev={[], 0x2b}, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x2, 0x0, 0x1, [{{{0x11, 0x2, 0x6002, 'ip6gre0\x00', 'bcsf0\x00', 'veth0_to_hsr\x00', 'team0\x00', @empty, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], @broadcast, [0x0, 0x0, 0x0, 0xff, 0xff], 0xa8, 0xa8, 0xf0, [@realm={'realm\x00', 0x10, {{0x34, 0xa6c}}}]}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3, 0x80000000, 0x585d}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{{{0x9, 0x0, 0x6007, 'erspan0\x00', 'syz_tun\x00', 'ip6gretap0\x00', 'yam0\x00', @dev={[], 0x13}, [0xff, 0x0, 0xff, 0x0, 0xff], @dev={[], 0xc}, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@remote, 0xfffffffffffffffd}}}}, {{{0x3, 0x40, 0x986f, 'veth1_to_bond\t\x00', 'syzkaller0\x00', 'bond0\x00', 'bond_slave_1\x00', @random="fae44c234370", [0xff, 0xff, 0xff, 0xff], @random="3b18cbd5dbe0", [0x0, 0xff, 0xff, 0xff, 0xff], 0xc0, 0xf8, 0x130, [@helper={'helper\x00', 0x28, {{0x0, 'amanda\x00'}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@dev={[], 0x1c}, 0xffffffffffffffff}}}]}, @arpreply={'arpreply\x00', 0x10, {{@remote, 0xfffffffffffffffd}}}}]}]}, 0x6d0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) [ 2091.718663] misc userio: Invalid payload size 15:29:51 executing program 3: bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r0 = creat(&(0x7f0000000140)='./file0\x00', 0xe2) write$FUSE_BMAP(r0, &(0x7f0000000240)={0x18, 0x0, 0x2, {0x1000000000000}}, 0x18) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000280)=[0x1, 0x6]) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xffffffff80000000}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r1, 0x3, 0x8, 0x7, 0x0, 0x2f}, &(0x7f00000001c0)=0x14) write$P9_RLCREATE(r0, &(0x7f00000000c0)={0x18, 0xf, 0x2, {{0x49, 0x3, 0x5}, 0x5}}, 0x18) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:29:51 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xf5ffffff], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2091.748756] Unknown ioctl 1074021792 [ 2091.762997] Unknown ioctl 1074021792 15:29:51 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x2600000000000000}}}], 0xffffff76) [ 2091.857364] misc userio: Invalid payload size 15:29:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) getpeername$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0xe874026669cc16ae) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000540)={0x53, 0xffffffffffffffff, 0xfa, 0x3, @scatter={0x1, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/229, 0xe5}]}, &(0x7f0000000340)="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", &(0x7f0000000440)=""/163, 0x2, 0x4, 0x1, &(0x7f0000000500)}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet6(r1, &(0x7f0000000100)="07705b876082c119b53992472f084a45b7c0e53346bdd4ca1b06dbc70932eb4796565dc117e43b432075c8ea5d12a592de27c95f0328a189adfa35af4aa7fcd11d91fa1fec213cec374494c928818f03832321d2d33ad7463eda9e3f8c90682b9bed34e441", 0x65, 0x800, &(0x7f0000000180)={0xa, 0x4e21, 0x2, @remote, 0xffff}, 0x1c) 15:29:51 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xffffff8d], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x7a, "bb7a059bb8b49e58e706f7c3c79646e0fa598492c216491f28b3e687208858d4a54277288af3523a0667911c4a2d9a637c053f902c26247c23c94652ad8cdbdd17b8e19cc92f1bb7a1f9373b865a209e72bf042e40eaf6fa538f0efaa8cb12f727f8ded72416053efea1ee29eb1a2fea2f9bafc8c6463acec727"}, &(0x7f0000000040)=0x9e) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:29:52 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) setns(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$KVM_RUN(r0, 0xae80, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x580, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000b85fe4)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/36, 0x12}, 0x2000) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000001c, 0x0) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000100)="6419f4ab98dc70da7161500f08a8178eb7234f643e4af4cd7500c5d71a25fce2d63719fde0db41713b0b39ac83d53125d23bf458610f8ad7709b3e1b2ee0f73bd4", 0x41) 15:29:52 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xfffffff5], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:52 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0x95ffffff00000000}}}], 0xffffff76) 15:29:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup3(r0, r0, 0x8000e) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000040)={0xb0a, 0x6, 0x1, 0x8, 0x200000, 0x590}) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r2 = semget$private(0x0, 0x2, 0x1) semctl$GETVAL(r2, 0x4, 0xc, &(0x7f0000000080)=""/216) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) modify_ldt$read_default(0x2, &(0x7f0000000240)=""/220, 0xdc) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) connect$pptp(r1, &(0x7f00000001c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) 15:29:52 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x725, 0x80240) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x4, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r1, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:29:52 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x3c, &(0x7f0000000040)=0xfffffffffffffffb, 0xffffffffffffff38) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) [ 2092.599767] misc userio: Invalid payload size 15:29:52 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x100000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2092.651179] misc userio: Invalid payload size 15:29:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x2, 0xa01) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f00000000c0)={0xbb11}) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000080)={0x0, 0x400}) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000240)=""/218) finit_module(r0, &(0x7f0000000140)='\'em1wlan1md5sum\x00', 0x1) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000180)=0x10173ecd, &(0x7f00000001c0)=0x4) 15:29:52 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000040)) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:29:52 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xbf00000000000000}}}], 0xffffff76) 15:29:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) [ 2092.779562] misc userio: Invalid payload size 15:29:52 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xf401000000000000}}}], 0xffffff76) [ 2092.882622] misc userio: Invalid payload size 15:29:53 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000240)="dfe19158223b6206d539b77b383b144e3faa430941b69d6476ddffad5f7d9bfec4730252846b98f7642eca18cc232b896dcf57e9ebefe9a3805cfd913a7c8d326cea", 0x1ac, 0x6200010, 0x0, 0x0) connect(r0, &(0x7f0000000040)=@sco={0x1f, {0x2, 0xf98d, 0xfffffffffffffff9, 0x72fd, 0x3f, 0x5}}, 0x80) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:29:53 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x400000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) write$FUSE_LK(r1, &(0x7f0000000140)={0x28, 0x0, 0x1, {{0x9, 0x4, 0x1, r2}}}, 0x28) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000180)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 15:29:53 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x200000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:53 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xfdffffff00000000}}}], 0xffffff76) 15:29:53 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x400000, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = getuid() fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={r1, r2, r3}, 0xc) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000240)=@get={0x1, &(0x7f00000001c0)=""/27, 0x431}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xe00, 0x0) ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, &(0x7f0000000080)={0x8, "e085ae3d5263229b513745ad8dad038312edf0e1a64533edd780a7fe52d480b8", 0x4, 0x80, 0x20, 0x6, 0x4, 0x1, 0xffffffff, 0x7e0000000000}) setsockopt$inet6_buf(r4, 0x29, 0x2e, &(0x7f0000000100)="26114a1de9033bc10050d47a7f338aefefb8c65e9d6b6f5a6b40c995a9aca6431509aeb84d53ba75d423051c74038b0f10c567e7c7055230899c51c5fd97399a00699cc797163414cfc1c042183a0e0f01722e6d61d72990971c34e85aeb65dd007c9aa4225872197f39af73da69d12669f29482f1031913dd5f90489140ce771278", 0x82) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:29:53 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000100)) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f0000000040)=0x1) [ 2093.512718] misc userio: Invalid payload size 15:29:53 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x300000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8920, &(0x7f0000000100)={'dummy0\x00', @ifru_data=&(0x7f0000000040)="9331b66d4291b5c159b25d80564f2ebb8fb6a5abe006ff893d19312aa6a3d2e8"}) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000180)='big_key\x00', &(0x7f00000001c0)='dummy0\x00') 15:29:53 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x600000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:53 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) getpid() sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:29:53 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xfeffffff00000000}}}], 0xffffff76) 15:29:53 executing program 1: r0 = open(&(0x7f0000000280)='./file0\x00', 0x220300, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r1, 0x9}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000002c0)={r2, @in6={{0xa, 0x4e20, 0xff, @mcast2, 0x10001}}, 0x9, 0x3, 0x7fff, 0x4, 0x2}, &(0x7f00000001c0)=0x98) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x4000) socket(0x9, 0x6, 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000240)={0x5, 0xc9}) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) [ 2093.640052] misc userio: Invalid payload size 15:29:54 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, &(0x7f00000002c0)=0x8) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000040)={0x3, 0x6, 0x1}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x40, 0x7fff}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000180)={r2, 0x38, "a093db172c07329b441d81da5dcffafda9b5f99738572733a0808837a49df0b744c1682f9bb257c741b36b04a952cf9bec73409b2e326bd5"}, &(0x7f0000000240)=0x40) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:29:54 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x700000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000180)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) lchown(&(0x7f0000000040)='./file0\x00', r1, r2) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x80000000004e22, @dev={0xac, 0x14, 0x14, 0x28}}, 0xffffffffffffffb2) 15:29:54 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000100)={0x7, 0x7fffffff}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) modify_ldt$read_default(0x2, &(0x7f0000000240)=""/157, 0x9d) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3a, &(0x7f0000000140)=0x401, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000300)={0x0, r3, 0x1, 0xaa27, 0x401, 0x2}) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(r2, 0x5420, 0x0) close(r0) 15:29:54 executing program 3: r0 = gettid() sched_getaffinity(r0, 0x8, &(0x7f0000000280)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x4000, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x4e12, 0x10001}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x6, 0x4000) sendto$inet(r2, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000140)="df", 0x13e, 0x4, 0x0, 0x68) 15:29:54 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xffdbdf2500000000}}}], 0xffffff76) 15:29:54 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x3300000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:54 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect={{}, {0x0, 0xffffffff00000000}}}], 0xffffff76) [ 2094.466232] misc userio: Invalid payload size 15:29:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x200002) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000100)) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)=0xe0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x404080, 0x0) 15:29:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0x15}}, 0xa6) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) [ 2094.585915] misc userio: Invalid payload size 15:29:54 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x3c00000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = dup3(r0, r0, 0x80000) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000040)={0x8, 0x5, 0x10001, 0xfff, 'syz1\x00', 0x9}) 15:29:55 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x16) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x8000, 0x0, 0x0) 15:29:55 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0x11fffff76) 15:29:55 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fcntl$setpipe(r3, 0x407, 0x8000e) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000008", @ANYRES16=r5, @ANYBLOB="01002abd7000fddbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffb000/0x4000)=nil) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) ioctl$TIOCLINUX5(r2, 0x541c, &(0x7f00000002c0)={0x5, 0x788, 0x5, 0xff, 0x2}) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) 15:29:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8001, 0x100) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:29:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0xfffffffffffffe54) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2000, 0x0) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000100)) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0xffffffffffffff9a) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x100000001, 0x1, 0x4b41, 0x1f}]}, 0x10) bind$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0x2710}, 0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x7ff, 0x1, 0x4, 0x8, 0x2}, &(0x7f00000001c0)=0x14) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000240)={r3, 0x8, 0x61fc}, &(0x7f0000000280)=0x8) 15:29:55 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x4000000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2095.304124] misc userio: Invalid payload size 15:29:55 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@mcast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000240)=0xe8) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)=0x0) r8 = getegid() stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getgid() lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000008c0)={{}, {0x1, 0x1}, [{0x2, 0x2, r1}, {0x2, 0x1, r2}, {0x2, 0x3, r3}, {0x2, 0x6, r4}, {0x2, 0x4, r5}, {0x2, 0x5, r6}, {0x2, 0x5, r7}], {0x4, 0x6}, [{0x8, 0x2, r8}, {0x8, 0x2, r9}, {0x8, 0x1, r10}, {0x8, 0x5, r11}], {0x10, 0x3}, {0x20, 0x1}}, 0x7c, 0x2) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:29:55 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x5800000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x4e22, @multicast2}, {0x307, @dev={[], 0x17}}, 0x62, {0x2, 0x4e24, @local}, 'ip6_vti0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) 15:29:55 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x5}, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:29:55 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000500)={@remote, 0x10, r3}) r4 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:29:55 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:55 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000300)='/dev/dmmidi#\x00', 0xf0, 0x42000) write$nbd(r1, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00'], 0x10) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000003c0), 0x2) lsetxattr$security_smack_transmute(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x1) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x100000000, 0x30}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000280)={r3, 0x4, 0x10}, &(0x7f00000002c0)=0xc) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x2040, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/userio\x00', 0x444000, 0x0) ioctl$VT_RELDISP(r4, 0x5605) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x4, 0x4) 15:29:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) clone(0x40000, &(0x7f0000000040)="57d204df880a23d1d7b4ff4df2003da936d1bc58", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="10ea856711827c99e4e405bbe3a0f4e8ad7b44f2b25143cdc81a4d686f04d8292da6ae0627625c6eda1342a65bd4") 15:29:55 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x8000, 0x0, 0x8, 0x81, 0x13, 0x101, 0x7f, 0x1, 0x10000, 0x7, 0x5, 0x9}) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) clock_gettime(0x0, &(0x7f0000000100)) write$sndseq(r0, &(0x7f0000000000), 0x0) 15:29:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000240)={r2, r3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0xffffffffffffff28) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000040)={'bcsh0\x00', 0x1}) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:29:56 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:56 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00\x00\x00\x16\x00', 0xe) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x7af) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000100)={@multicast2, @dev, 0x0}, &(0x7f0000000280)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00', r5}) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:29:56 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f00000000c0)={{0x3b, @broadcast, 0x4e21, 0x3, 'none\x00', 0x1, 0x3, 0x80}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x4e24, 0x2007, 0x9, 0xbd, 0xeceb}}, 0x44) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x0, 0x0, 0x0) 15:29:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @rand_addr=0x1}, 0xf) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0xf) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)={0x9, 0x7, 0x4, 0x2070104, {}, {0x5, 0x2, 0x200, 0x1, 0x1, 0x5, "e2f2090c"}, 0xb9, 0x4, @planes=&(0x7f0000000080)={0x7, 0x81, @userptr=0x4, 0x4}, 0x4}) 15:29:56 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000008c29f352c5267b68d11c7040d779178c2263052d2727ecba7a7fcb961c2a9f0ff64ddd22df286cacf64", @ANYRES16=0x0, @ANYBLOB="000028bd7000ffdbdf2508000000"], 0x14}}, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r1 = dup2(r0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e23, 0x76, @rand_addr="039da21bb1d9717fa0bd01de903aa26f", 0x7e}}, 0x401, 0xe1, 0xff, 0x5, 0x9}, &(0x7f0000000240)=0x98) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x2) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x8, @empty, 0x7f}]}, &(0x7f0000000100)=0x10) dup2(r1, r1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r3, 0x4}, &(0x7f00000001c0)=0x8) 15:29:56 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cachefiles\x00', 0x6000, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000001c0)={0x9, 0x0, [], {0x0, @reserved}}) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0xb4, r4, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x8}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x17}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @broadcast}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000400)={0xfff, 0x5, 0x27, "7f764f36104008d0e210828b4ec635ce1eeac2d6c738debb99cf22780a9cea0487d7eeaf2c35b74be85aabee5cc96d8aa9a82f047458bed2786f8222", 0x39, "2acf6618996c8497dde4f224dd5017f654b639ad294ae7bf388692f2ea14d48c6219b48b15a48343c5eefa78a50295071ea9ff004e4c9a633c1eb593", 0x10}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 2096.310277] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20001 [ 2096.319061] misc userio: Invalid payload size [ 2096.340928] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20001 15:29:56 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x400) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0xfffffffffffffff7, 0x30}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000280)={0x6, 0x100000, 0x20e, 0x81, 0x4, 0x5, 0x293, 0x2, r2}, &(0x7f0000000240)=0x20) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000140), 0x4) setrlimit(0x4, &(0x7f00000001c0)={0x1f, 0x39}) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), &(0x7f00000002c0)=0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000300)="713be87bb1dc003b6b99a24372591888", 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:29:56 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xffffffff00000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x2000}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) [ 2096.418416] misc userio: Invalid payload size 15:29:56 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) fcntl$setpipe(r0, 0x407, 0x80) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040)={0xfffffffffffffffd, 0x80, 0x4, 0xe612, 0x6, 0x6, 0x1, 0x500000, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e22, 0x101, @loopback, 0x6fcad0c3}}, 0x9, 0x4, 0x1, 0x2, 0xf24}, &(0x7f0000000100)=0x98) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:29:56 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:57 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r2, 0x208, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xb8a1724a4bb648fb}, 0x20000004) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) write$binfmt_elf64(r1, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0xa1a) r3 = gettid() sched_setparam(r3, &(0x7f0000000040)) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:29:57 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000080)={0x0}) r3 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x2, 0x8000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000140)={r2, 0x80000, r3}) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) 15:29:57 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) fadvise64(r0, 0x0, 0x7, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r2, 0x3, 0x1, 0x3, &(0x7f0000000040)=[0x0, 0x0], 0x2}, 0x20) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:29:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) accept4(r0, &(0x7f0000000080)=@sco, &(0x7f0000000100)=0x80, 0x800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:29:57 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:57 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:29:57 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) [ 2097.194500] misc userio: Invalid payload size 15:29:57 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x40050, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:29:57 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2097.294680] misc userio: Invalid payload size 15:29:57 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x8, 0x1, 0xfffffffffffffffb}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000040)=0x1) 15:29:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x9}, 0x10) 15:29:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) io_setup(0x8, &(0x7f0000000040)=0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @loopback}, 0x10) r5 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x200000000, 0x2040) io_cancel(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0xd7e, r1, &(0x7f0000000240)="112a92eb9033e8c45b3b30c469d6429e72ebcb92e64b82a541fe61df03ad9f10162833554b2a7b7bc8a399074577992a8e3dca9c9b0b70314e93012ff0f99a1aa8746f9a1abb9716fca2a6f8c961c7a0ac857376d21d3fc33f8bf88ce2ad9f424493d70bf2ea2207fd51e078e9fee5652f8d66abea18b7ecee3e833a0e432bc003eb4e5dc58168b0303a2de1832ccc6eb456b339a1ed412e8371f795b432c5d5606543606495f6c0dbee9a2abdfbe41e0b209e3d46c80406520c27e97d188a18a03b7e7fdad848d362b9115df6e869ed204eb4b6658aabe04657e0a6f39d51234edd47a8e435fb806d9f", 0xea, 0x4, 0x0, 0x1, r5}, &(0x7f0000000180)) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:29:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x800, &(0x7f0000000480)={{'fd', 0x3d, r1}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x7}}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x4}}, {@max_read={'max_read', 0x3d, 0x5}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@fsuuid={'fsuuid', 0x3d, {[0x36, 0x35, 0x7f, 0x0, 0x3c, 0x0, 0x34, 0x38], 0x2d, [0x0, 0x65, 0x61, 0x66], 0x2d, [0x3e, 0x31, 0x32], 0x2d, [0x31, 0x35, 0x7f, 0x36], 0x2d, [0x30, 0x77, 0x38, 0x61, 0x66, 0x38, 0x65, 0x62]}}}]}}) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:29:58 executing program 1: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="6368616e679e81f7cc26f8ec6b066861742030783030303030303030c198873e10287d955e2500707070317d6e75f11778cc2ad50e2a746c6f00260000"], 0x35) r1 = dup2(r0, r0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000600)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10100104}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, r4, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80000001}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f00000001c0)={0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}]}) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000100)={0xfff, 0x1, {0x2, 0x3, 0x8, 0x1, 0x6f}}) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000780)) 15:29:58 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:58 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000028bd7000ffdbdf2508000000"], 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x8) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:29:58 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000240)={0x3ff, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) r4 = fcntl$getown(0xffffffffffffffff, 0x9) fcntl$lock(r2, 0x25, &(0x7f0000000100)={0x2, 0x2, 0x2ed65757, 0xfffffffffffffeff, r4}) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x7af) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x400000, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) [ 2098.113465] audit: type=1400 audit(1551886198.087:40): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=6624 comm="syz-executor.1" [ 2098.148481] misc userio: Invalid payload size 15:29:58 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x33], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2098.166649] audit: type=1400 audit(1551886198.137:41): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=6624 comm="syz-executor.1" 15:29:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0xffffffffffffff97) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f00000000c0)) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:29:58 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x9, 0x80000001, 0x2, 'queue1\x00', 0x10001}) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:29:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x2000, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, 0x1a, 0x13, 0x14, "98fdef3228af4b271da1d05d9d66bdb1362d9f27ddb5190578ae4ec68288d23ce809fbc2c153543dbcdc90453bf82f5258722eeeb9a00b2bd023c7fe3eecab59", "08265ccd1c8640ee4eb4d0f14ab6cff0639f878f9446c81f8acd4e7cdd691c86", [0x20, 0xc1c]}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) [ 2098.258966] misc userio: Invalid payload size 15:29:58 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3c], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:58 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000240)=0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000140)={r5, 0x0, 0x1000}, 0x8) ppoll(&(0x7f0000000280)=[{r2, 0x2}], 0x1, &(0x7f00000002c0), &(0x7f0000000300)={0x80000001}, 0x8) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) [ 2098.436708] misc userio: Invalid payload size [ 2098.508221] misc userio: Invalid payload size 15:29:59 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000140)={{0xff, @local, 0x4e21, 0x2, 'sh\x00', 0x0, 0x9, 0x60}, {@rand_addr=0x3, 0x4e22, 0x3, 0x7, 0x8, 0x1}}, 0x44) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000240)={0x100000001, 0x5, 0x6, 0xb9, 0x7f}) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000280)={0x40, 0x9, 0x7fff, 0x0, 0x3, 0x200, 0x401, 0x400000, 0x3, 0x9, 0x0, 0x20}) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) setgroups(0x0, &(0x7f0000000580)) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) nanosleep(&(0x7f0000000040)={0x77359400}, &(0x7f0000000100)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r0, 0x10, &(0x7f00000002c0)={&(0x7f0000000480)=""/220, 0xdc, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=r2, 0x4) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000400)) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:29:59 executing program 3: socketpair(0x1d, 0x0, 0x5, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000240)=0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x3) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r1, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x7, 0x80000) ioctl$CAPI_NCCI_GETUNIT(r2, 0x80044327, &(0x7f00000000c0)) 15:29:59 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x200000, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x7ff) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'veth1\x00', 0x401}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) semget(0x0, 0x4, 0x8) mlockall(0x7) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e1b, @empty}, 0xffffffffffffffae) getdents64(r0, &(0x7f0000000140), 0x0) setsockopt$sock_int(r0, 0x1, 0x3f, &(0x7f0000000140)=0x100000000, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000100)={0x4, 0xce9b, 0x0, @empty, 'eql\x00'}) 15:29:59 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x4, 0x0, @tick, {}, {}, @connect}], 0x30) 15:29:59 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x58], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:59 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x48000, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1000, 0x4) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='erspan0\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) fcntl$lock(r0, 0x24, &(0x7f0000000100)={0x2, 0x2, 0xffffffffffff7fff, 0x5, r4}) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) [ 2099.114648] misc userio: Invalid payload size [ 2099.126054] can: request_module (can-proto-5) failed. 15:29:59 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x300], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2099.155042] can: request_module (can-proto-5) failed. 15:29:59 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:29:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) modify_ldt$read(0x0, &(0x7f0000000040)=""/41, 0x29) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:29:59 executing program 3: sigaltstack(&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000040)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) [ 2099.208707] misc userio: Invalid payload size 15:29:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0xffffffffffffff4f) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140)="39ce00d10ece264e759264403e7cf655e4a3899d7f82d065001983191d6d104aec378c690269ecdf4b9c685fe28ce1fe3a07a9a903b7e85f0000950b1c714b6c1bd4f8e290597079f98526b4927d0d9b900dc18788d203c50c57afd2d50a8c", 0x1, 0x6200010, 0x0, 0xff47) 15:29:59 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) io_setup(0x10001, &(0x7f0000000040)=0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0xa180, 0x0) io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x8, r0, &(0x7f0000000400)="af1455ca9b462d0b18eb20b5970f8527e6484a4bb72235d5344a77eb0ff08b904599602f4466b3ee0d4e74628385ccba526d73b0de79853f5e3ed28283263542148c97ef6640caa431c4c5538623cff2274ac3b0c9a20f4e8fee478e8278b3220578208aab9bf0d01c028dde78b309505ac5fe5357b050d2b7c0f3499fd33043add110d1f8151481011b670b0b898f27a0a0e7ba8e7344a082495a85c9f6c69c84534c3af7fcf3a005bd30a6516dffc33d2013a10e8b62df7c0fe00d4b81cee478f7dd6c09a9f86af37400917965e2b8d138355d119b47b4ffd087f92e26a08f80083d9e5f418497575153", 0xeb, 0x8, 0x0, 0x0, r3}]) r4 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:29:59 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x2000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) getpeername$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) exit(0x5) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:29:59 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x600], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:29:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0xe) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) process_vm_readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/218, 0xda}, {&(0x7f0000000240)=""/232, 0xe8}, {&(0x7f0000000980)=""/182, 0xb6}], 0x3, &(0x7f0000000840)=[{&(0x7f0000000400)=""/200, 0xc8}, {&(0x7f0000000500)=""/133, 0x2d}, {&(0x7f00000005c0)=""/142, 0x8e}, {&(0x7f0000000680)=""/184, 0xb8}, {&(0x7f0000000a40)=""/63, 0x3f}, {&(0x7f0000000740)=""/127, 0x7f}, {&(0x7f00000007c0)=""/94, 0x5e}], 0x7, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000900)='/dev/v4l-subdev#\x00', 0x0, 0x280200) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000940)={0x1, 0x102, 0x5, {0x7, 0x6, 0x5, 0x2076c48b}}) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000008c0)=0x1100) 15:29:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000100)={@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}, {&(0x7f0000000040)=""/54, 0x36}, &(0x7f00000000c0), 0x40}, 0xa0) 15:29:59 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0xfffffffffffffc55) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:29:59 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000040)={0x2, 0xf5, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:29:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:30:00 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x700], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x2000000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:30:00 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000028bd7000ffdbdf2708000000"], 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f00000001c0)={0x7fffffff, 0x8, 0xc45c, 'queue0\x00', 0x6}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:00 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000040)=0x0) r6 = getpgrp(0x0) tgkill(r5, r6, 0x38) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$VIDIOC_RESERVED(r2, 0x5601, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) shutdown(r3, 0x1) close(r0) 15:30:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000040)="df", 0x1, 0x6200010, 0x0, 0x0) [ 2100.214516] misc userio: Invalid payload size [ 2100.265668] misc userio: Invalid payload size 15:30:00 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x40) sendto$inet(r0, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:30:00 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3300], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x1000, 0x40003) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000080)={0x2, 0x8, [0x7f, 0x2]}) 15:30:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x0, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {&(0x7f0000000240), r2, 0x3}}, 0x18) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x80000001, 0x30, 0x4, 0x7f}, &(0x7f0000000480)=0x18) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000004c0)={r3, @in={{0x2, 0x4e24, @remote}}, 0x6, 0x2, 0x1ff, 0x7fff, 0x4}, &(0x7f0000000580)=0x98) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:30:00 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = dup(0xffffffffffffffff) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, &(0x7f00000001c0)=0x10) r1 = memfd_create(&(0x7f0000000580)='\x00\x12CJ\n\x00\x9c\xd5,\xe2g\x9e\xf8\xb7\x94\fR[\x84R\xc9\x1e\x962>\xa4f.\xc8\x84S\x7f-\xd8\x9cc\x9c9\xc3\x90\xe0A\xcc\xc8\xa63\x00^H\xf3\xe2\xe9\x81\xcd\aa\xdb=e4\xfei{\xff\xff\xe3}e\x1f\xb97;\x9c!k-$\x9cf\xa8\xc0\x81^\xdf-\xff\xdfg\x1a\x8b\x80-\xdfYm\xf1R\xf7\xc4\x03\xd7\x11\x85\xaa\xbf8\x06\x10\x1bn\x17Tj\x16Y\x9e\xb0\xb4\xd9~\xf7\xf7M\x1e\xa4\xe2f\x12\x8f\x83G', 0x2) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:00 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xcb7, 0x5, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:30:00 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2100.858439] misc userio: Invalid payload size 15:30:00 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="008028bd7000ffdbdf2508000000"], 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000001c0)='s\x02rm+\xfdC\xdf/\xf0\xc8v/\xda\xa5\x03\xf1I\x94\xa8d)T\xe9c\xca}\'\xe6\x8c\x04\xa2\xba\x85y\xd4%6\xee\xcc\xe5\x02pj\x06>\xb1Q\x9e\xc1\xbbH\x82`cZ\xed\xf5\v\\.\x02{$ \xc2r\xae\x1c\x81I>\x02.\x16\x80\xd3\xc0', 0x2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x40100, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000140)='posix_acl_access{]]vboxnet1\\nodev\x00'}, 0x30) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000400)={0x12, 0x1000, &(0x7f0000000740)="66d0ba1f1c7785cec35188e763960c8d7d9fcbeda743e199300f50a3b239b9f0c8b9440fbde46eba2fc5944903caebacb6278e675eb92de26232cf491d23238280044b67a78feae9250ac5750a13e9c0aaef7fbda71a23ae7529c998b91f7772cfb6642c15ab3e29fe8fc52afa13bec84eebef4a94f0869ea399a3b3558c133185f7b7a2e418e251dcddda08d396af2068b4de477a25e4d5791a02c815ed72b385d677c394b63ef6edd41ecb94c7665b21ad55d1b29299686eac6e561e5e08238757e37c5c147cf6521898d37ae594306c65722c2744f22ca7145931290f0897175dd435127c4a218a3a84c6600ac28f08c94bce661debcf7b88c498473930b119a7015a533b96cccc4cc5b02c6fc1917e5ac54f1503a9f00733efa628166dbc3c8cf04ac97b6939afa412c21148708dce2420d79c6b55fab5899862ccb78ac552b918d7fc061e56374b969ac6450aaf8723bfd1e17bb521d7f2f0c8e575192872fb8d4079ef9c8312cf16bfa3154e7aeef3d6279ec3c7c0733d92f3417ae77eb8bd92146b24f7341c229931a49969b14e2419f30da0654fb3b4ae2a61b3ffd2d67f27f80be1a72bb590061adead7fc3e3b382a703bed15156f815fa4ec0f4e61d48a4dfae90e7dad19ebde10953587eae49e28e6d5bf995cd84dba9d9db1542ff987180bc92a7b390bf756d25e49d92f0360f24627ae6d793fa43ae2e014216b93e23207db7afe4706f00b5ea8cbdcab227fd5da6b4579e096ba13a8f1e25e70779ad2d6be1ab6aad13e10cc3bcf15d99e1f940aa3cb4894c5286d5491c724bf8c975482bb15a95acf7e2d719c4d20d9b30b155d126193c9df8931983a46170804142db49664a787360d9535ff20397c73de934835b89cc926273c9f85d0616343302940c0d7df685078696be2c279da54624f0cd98075a67ec6cb754c81beab59a8cc183f88a8b597929b93d4b74aac1563cce122f901c557f28bf3a561f4e7947e0975241e8cfe01b22100d0d8843d10d9338d0342f8a747551136d1d84dd7665ebc7a64facd572a78caf3f89fb7ef6dedfeca5a16720cd93878b5b9898236968faa3dba170d3abb1c6d775955d64c40e0fd5b316201e90dec61f14f3b0452196a45a7222aaaab7a13f1c1f244e914c7aa5d5715d0d537f06440a1ccc5408ba6e170cbcf45e3fc4d118e6df0bab7b144397db651781d61d708f29114976ebb49d8a049167f2e68862a9c0884436dfcb469158dff25752ac6206026accae4023b888b2afed943970a425841269ead53b550a9fff620833801d69534e48f27a57be1d20f7ebef3ea5fd8732fc5e78a30d756b6e3c381a627d4a410f2e5773e7a64e96b5bdafb2a2ec6c3eccd588d10d424f6f7f5b1a015b0c730f638bf48b40006322fe5dc8694cad0da6f6acd7ced2028f59f9680b9f608920d2ee633f5bd2fd1ed6eace4dcd1db0d4ae6638da5c7bd7eb0ffd62acf2c7cbc0ac14976a7b7aac68eebe669af0f2bc4ec0d0726d715e8e042411b56bb7772e924b18f735674e29befa626719109e12f4746aefba5e443fc9927986a2cbf139077f46e7212264b93863159315fbf1461e267ab6ce132813b2fb30b9e905fc522a9d38dead2c3d597873fd398b5d04658d6fc9bf5b2a48211df832ef6477e08bf77a6ea085b4e39eb09d36515af7b52a62f5821720558eaa0814ee4611288c3739160ad75ecff9e45051b4d487b18dc2579da00131ee3b258f831a10477c45055f363729dc9e054145e47c8dd9118763920ace90b29231862454ef966422d03819c4fbbfc8c1846c8f50dcf2f296f9d9b3d9103ad8e91d283aece91a5e69229cd994e8bc5729d5c3b783613f4a7bd3e3eed0ba221fad4c883fa1bff3962565680e612eedf74be8c47acbcb6162412a1fbb428aa1f2b45d2c08aba003cf39de319980cf0387ddc7ac3a6d6e1af67677a3ffdef5db4485e673c80d172bb3348bd00c3e3b6d671335bfb70c6d536393bc9e9147bc5d2d3e79b8fe4de55a47dedc0baa988c961363e4b63929b5274da33bb1a3dd5a7a4c00c926368b034ed2311526ba8c06cc8d0c0a2b340da55639f8b1efe0fa9f4f0d3e9b3f76a930a72cd95eefc859086db07112f3ad423207a480ece92ae448a014b1da5a4ce5e4de950c91a5cde65817822ce9f0a4454cdb86a3c8cec04cc15a376bcff9d8fd8d150c5414431ac20867adbf8f6bbef0aa98cc01558fdaa56a708d656b253236de7c41a68847f2525bafad60adafaa3efe875ce3d2720e040d05bbc94d771e7433d701c2cb4af2a9a5cafdc5b27c02f379edd0eceab3e0ffb8aa5f02b4b3bc38cf1a0cbe41374f14765f57bf324f628774b21ca6f1d990dcb0a8dfc6a239e4c9c2d90bdbc14fe9aa3ef2c47b6838b360b4fe6be5f1d17f148846f457a3ae49b3b057f33edd4331eac57c9cb1b901894b1e1949c477344d3442d5dfb61fbc2665c68e5c354adc8c19d94c7c4b9713b373e3bc05303fec5f92196397f89330ebe031977e850be3649985cd54f7508af883363ed54b36f39b4ffd796c10d7f204938b5d0412da01e5cb231f293050204a8dd215c799176ce1bbc43a56e8e41eeed800f1141106b5c511cf460f93a7b009aec3b88dc90a1b51c1e20e41dfe6d2039ad563a92d1beb360ac3d6c74036ddc8fb66256efa9b7e2402e37db31aedec68ec0dd856f388c447c8bc10d334c66c361e771a96e0a130080936950ca34872f0217a0bd7810eff3bbecaa8f3c78b1d04af2b241a35fb7c91744c31a622a770e3536483384a168b514f180f23bc04dd1bb8cda6ce6ae2dd2226c609028225820fa177d24dd594847288a1aae91575d7c994b82a2119d3db234876068bf603966199ce2a9be23ce984eb282cc77cafcd59a0087e3bba36aec1be13d1cd1e1d8616fbd1086feb71f07fa21c8b85773c0cffa9eac555b501bafc841a305ec470c6c97b35feef2589dfc6e92874ac68dc926021e0a57101fb30990db2e4f7e9edf396ed8c59c41e6ed701aad8653b2bcf8b1750765b0672fbdc38f764fb4196390fdb5610737a823db6412c69913c4386acdc1384dad9ac826269b1394a763f5af8a2159ab9c01e27948264b8e4f6ba53f2b0eea9d7eea9f41d0449c48672413ea99137862ce7e680ed26363e49f7589eaa645d41347022fdf78a0afa7712d86fc115ead2da650fa231f298851dc934d18709835394783eaf2560233180708c4e59a18c6ec405e369bd85623a3b82f32eb6f71697390f8cb3bcfe0c311d846a2af98009f8fbbd18fd6799863aaf82871fa7d235141bcde71fbe25c278fb42a5346371c53846fba0918dd3d5d0977bf6d82439ac373a2f2e11e972df4dc06d3f98c77392b95f2a7ce560c91fdb06db4874e576cc2c62a4fb120a27ff234576121dd31ea3ad7a6de074e1a75b178e2c91b6839cad6cd70c91ee1f710666bf7a21617585dd0499ecdf61477439f749dd1df064a766cd2782cb3978556572fac3dc8c578d855153040a952a27c81f8bc6a81f07a5f85df4268265a4ef0ab4f164e444079672369828f8e644bf471acdacd845a6df8d0569ba0640aa3b282d92c112a6c2a9838f2b16873debe32bcb2547fba95309cdb188f90160fa31d294e15d2a64120a5b9ad0832617050b161c55da894746b14eb0c6659ff51f8e60903c32a7092e494a0861f1616b9247c66d6111b87cfdf72aef5a60cf7bb5d64adb5b8d7f8c3abd07d7d31c6b1895d49b0b143c1d0cf2687b11f419612ba61eddf0a925f9cf8ae047d59c4e15ec92ac438aa8bcb21e1c7d086903306e9b7065c28c76539c5880fed2ac5bfd9671b509997a122856b4c2976582769ae810fb55261def32ca10865134bf9246f1a23b222dcbae259368a4a704e058c500e6ce228bc36022ffb8fa5eb66bd8776439a6d0589bf134ea91211a1b4c0f44aa5b50f6f991900d06d1e7bb7a46c687e19ac30ef30d234c140457b0535a7dd40aa44134a8b13d6786a53b8b90f9986f79ee86316f1b8b39fcd5c8704c900af3801da20f058d2f2e494a5c31842816d607d1e7b7147d5a71042f12b29cde81a0a086ccb67846ddee60121e8a65eef53dc98c011711855e4fbc3684505541e660d02816a206b8907e67168dfc6176ce0c17c9c52d598d733044a0a1bff562a2836ed41155243fcc4ef11590e2b54f64a3c2fc6f453659086c2bc1922c360cdc890e7fe4945659e752c11d275450c4adf37f48da1a312df937a6b087537e97648d58fbc93a467341c142668647547f4e3939e18d293a19eff2d88354a8ca8e77696684aaac37181612965f16fe1fb438efa6f2d08aee426fadfd6a794e89a1c891c15af02881edd100d86b92dd02a65f876a34cb0a533377e6868e4a33e885201bd41ddd91e5617f707e036b3aa6e4b803d9c5ddea29d33a0773ef2ae936ede31c16b20c10e5a63e6c17c7d89541c7f408de8b6af7819d8dd997b31beb3beee8f69dc3bdd3abf2e388b3cf40dfeb25c40d77d5332cbe5c9219c6adc8dbad27dc6e02375825bd95bf1b3973eaebc8575404ee001bd8c2865085caee0cbbd20faf331f77d3b92192e787f9667e9a04092948a1a3547fa06a96045fb486a26544de0f1e2667b70bda52f2063191ce281ae5797aeaa80dc5ee2ff3e05fe48fb058afbdd4a9464fb5b06d8c4a59822754258b0edb1b8d44274a416cc659f77b81964e21ffa247f6a7dd7439be84bcae0d1be7ba33fd7c1ef42f1264687d1296bd5a6b606d385757cdb456779e81ec009ec0fc85547bee362cd7956a019f1e8787b529635e2abbd67cbae140d95baba430fc75c5b7d9c0001e09f253716f782cf0bf9cfeac20c012a8bf05147ed23eabe5d35d61e424f52cef372bdf5d7b3f8c6ff518452a1ae439baed8adc6323de4c03c3fee440eaef6ca31706c44a4c2686ca49f7f48bbab6931e9f74b097e97872a9c74d78bf208ee43f7fe1a4bd7db6d4dbea69fa70b8465a3730e9fd1becb0e7193451f5d9e453c0447f0b9793a8f18631cb9d534e8c3fcd4c923c2008704299de15fc71b944ee7ca9be1d994ddc86b83431af998dc0afe49e0f9d028aeead47402e89ce6ad9bd7824a0151be945d73a4571a940b5fd37c39135f155cbefc467150c93a541fb629171bda62ffbf329b78e162a630aff28264f42e92cca179d3e3bbfa5d0552eb5a918eb68deab53a93545f88d371fa80242edef0acbbe034c7ad24f460733772a134620a58ba2c905273105ef317fc2b5db8e6fa7aae3c9b6e67128f8f20a08050e0df4f5fecc8d0c1539e7e014964cfbd412e2831e8c23e1684ebe51d580f5b23831ac790c64b2d5b46091beeb3c7df43ad722079473fe5da2faa0f8e1cfa4e504b7ca49afabe3c75d0ff5a3532c31091056049a440b7d94b9dd85cf8c54696401549d17070f152b14a98e481be98cfe0f0e904517ffcc768ac25d79513de13f504e3413fcb61090138b1e3ea8f5d191c95377931b4c7a1400542aeb242a5e0afdb1c129d1b5af7e75c0c5c9684e884a1842de4af1887d1a7edc1924067e97434f7090afb085c1921ed48ae1a5729d255c878d2426636701b7502db2c1349cc6f67200537348d19a0ad53eafb4408acef7c79c98440d8ec9a4e82d8b44ad6ef9e2b224d9a84902503d9b9a8b571dc6de81c8ee35cf5a78313d11afac97ee574d19de0435f58e044fd227ebbdfdf541085bf736c1f8dfa35eba88bef3a30f32aae37103016510b38bcd9713e523fcb3dda0f242a7add28a30cb200dd9e33e1b9dad285dc9e59132"}) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000300)={0x8, 0x4, r2, 0x0, r3, 0x0, 0x0, 0x7f}) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x1000000100000000) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000340)={0x0, 0xdaba, 0x2007, 0x1}) r4 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r5 = dup2(r4, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$NBD_CLEAR_QUE(r1, 0xab05) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 2100.912058] misc userio: Invalid payload size 15:30:00 executing program 1: pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) recvmsg$kcm(r1, &(0x7f0000000440)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/175, 0xaf}, {&(0x7f0000000240)=""/31, 0x1f}, {&(0x7f0000000280)=""/27, 0x1b}, {&(0x7f00000002c0)=""/156, 0x9c}], 0x4, &(0x7f00000003c0)=""/107, 0x6b}, 0x40000000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}, 0x1ce) 15:30:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setsig(r0, 0xa, 0x16) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:30:01 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:01 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) personality(0x40000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x192) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="08002cbd7000fcdbdf250300000008000100000000000c0003000200000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000040)={0x10, 0xfffffffffffffe89, 0xfa00, {&(0x7f0000000100)={0xffffffffffffffff}, 0x4, {0xa, 0x4e22, 0x400, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000240)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0), r6}}, 0x11) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) [ 2101.128313] misc userio: Invalid payload size [ 2101.195001] misc userio: Invalid payload size 15:30:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) connect$vsock_dgram(r1, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00']) sendto$inet(r2, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:30:01 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00003dda519f3c28bd7000ffdbdf2508ed0000"], 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000140)="30580201f10cb8b56c96d27c44d58e94ea51a7dfc59e92e80d9482ca7839173a8f1143a7b4616dd21be3453ecf73039a20f43acbb6376139a9070ae27dd847474d1c59b2697801e6ebd81375ca00000000000082d0d6d6cfeb42", 0x5a, 0xfffffffffffffffd) r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) write$sndseq(r2, &(0x7f0000000400)=[{0x80000001, 0x0, 0x3, 0x0, @tick=0xfffffffffffffff9, {0x5, 0xffffffff}, {0xffffffff, 0x6}, @raw8={"37364658ba13919543d59448"}}, {0x9, 0x94d, 0x6, 0x7, @tick=0x6, {0x7f, 0x9}, {0x4, 0x65b}, @time=@tick=0xfffffffffffffffd}, {0x1, 0x7fff, 0x9, 0x400, @time, {0x7, 0x8000}, {0xff, 0x7}, @result={0x100000001, 0xffffffffffffbf06}}, {0x401, 0x0, 0xff, 0x5, @tick=0x6, {0xfffffffffffffe00, 0x4}, {0x20, 0x4}, @queue={0x0, {0x8af, 0x5}}}, {0xfff, 0x0, 0x0, 0xb56, @tick=0x200, {0x9, 0x7}, {0x5, 0xc82a}, @addr={0x80000000, 0x2}}, {0x80, 0x6, 0x1, 0x1f6f, @tick=0xffff, {0x1, 0xfff}, {0x8, 0x2}, @control={0x3f, 0xfffffffffffffff9, 0x2}}, {0x49d3, 0x2, 0x0, 0x9, @tick, {0x2, 0x3d}, {0xbe, 0x5}, @raw8={"b70a838ad9cab79aeb6d1cb1"}}], 0x150) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x1, 0x800) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000140)=0x6, 0x4) openat$vfio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vfio/vfio\x00', 0x1, 0x0) 15:30:01 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x5800], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:01 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x9, 0x80400) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f00000000c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r1, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x1e0, r2, 0x3, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x130, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x20, @rand_addr="ee3e76917e3278800cc3584915781ebe", 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @rand_addr="b8e2cc9d365b1eb658a8b856b32f9b43", 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8c}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @remote, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0xe}, 0x8000}}}}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20000}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:30:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x4083, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000080)={0x9, 0x8, "4339eb20da2907472bcce753563010408e9a8974dca867b6e1ca6777d9f69514", 0xfffffffffffffc00, 0x40, 0x400, 0x2, 0x40}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x0, 0x80}, &(0x7f00000006c0)=0x90) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000940)={0x0, @in={{0x2, 0x4e21, @rand_addr=0xb040}}, [0xfffffffffffffff8, 0xe5, 0x1f, 0xffffffff, 0x9, 0x3, 0x2, 0x1, 0xfffffffffffffbff, 0x9, 0xffff, 0x32a800000000000, 0x1, 0x8000, 0x4]}, &(0x7f0000000a40)=0x100) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000a80)={0x0, 0x27, "f0a84affb816a2db1d2ccff5ce05b3c2da787f0b1bf8c525960a7b952290b20a382b73c6aab877"}, &(0x7f0000000ac0)=0x2f) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000e40)={0x0, @in={{0x2, 0x4e23, @loopback}}, [0x14, 0x8, 0x9c29, 0x20, 0x618dfa29, 0x12bc5a52, 0x5, 0xff, 0xc725, 0x80000001, 0x5, 0x433b4fe6, 0x40, 0x1, 0xd70d]}, &(0x7f0000000f40)=0x100) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000f80)={0x0, 0x9a, "78df246111d1dce757d4164b17f4526b85f71c675b85e9f872b76255f8039c896ca23a082f0168211163ea89af140a61762941332bdc059ea1f94fd92937f6959e59d711ba79696259ceaff32e41509003f482984a7557743cc66d42057b2c2d98dd71d8c326c7ded82a23fd207f3f702d98cbe00d11d51495defd86408f71e1e899a30bf7fe9bc0a7497da712e607e650b0ccd9ab52c49169dd"}, &(0x7f0000001040)=0xa2) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000001540)=@sack_info={0x0, 0x7d2f, 0x93}, &(0x7f0000001580)=0xc) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000002980)={0x0, 0x3, 0x2, 0xffffffffffffff0c, 0x4, 0x6, 0x80000001, 0x0, {0x0, @in={{0x2, 0x4e20, @broadcast}}, 0xde, 0x0, 0x8, 0x1000, 0x7f}}, &(0x7f0000002a40)=0xb0) sendmmsg$inet_sctp(r1, &(0x7f0000002f80)=[{&(0x7f0000000100)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)="c5b86450dccf08d6ea08c723c16b092ae622adb3ff98d93aa580f326f82a02d54fe51b9d9450da5a0dc276", 0x2b}, {&(0x7f0000000240)="4931955ea5728c12f0f69ca40f5b797f98c731aa89af72d8476712d94207f4ebe0afb7f7e9387564e3de80182e72312dbf4e690198ea80f6d29e85f0118117c8e4a84fec193c30a513fe1466bf383bab40c08f8a7d2cbc8dbb8a03157ccb2e8ac5c9ceaf07e577a166c08b13505ac056309b3a7ff03a30493f3bba8ae253da0390da532b1c1131f93ad8942a9a08e1272f8beccf90ddab1fc442d2494e73adc9e469b4d8dd019ac37637316dea73dd0e54a199a10d049e488f241faa7991aa9c974aad1bee", 0xc5}], 0x2, &(0x7f00000001c0), 0x0, 0x800}, {&(0x7f0000000340)=@in6={0xa, 0x4e20, 0x9, @mcast2, 0x1}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000380)="1ae2cc6586952116f256dfc45c0d6cb111a7024303da6ae72710dc7030d35e11c46370924c6df0b16063b0522a58058a82cdc6a5e3c516d6f7a3", 0x3a}, {&(0x7f00000003c0)="e850eb7773eba87a8af3def0ae85da0860eed9df1f945d528a219127d91f2e61da2a6d489579257e19e99e", 0x2b}, {&(0x7f0000000400)="0bb9e6e07b597b104b0e23790c7cf9cde7145bc107f7906b7bcaeab7b825545435a31179a6cd8056783a9696c76bec059df2906d76d54255014f98be488fd94f6583d664a2a4d52cafe589d75ae4ec734b7bc00672b00a92c1499cb1af7ff04cf57c93e36c4892afb0c199712f723896d4a072a302b76f1394d4656039e1364b491cbddfd136cdf518301ffbb6c6f35f5520db9caa33da972b65149f5aa53f74610de174509861feda2bb08a83", 0xad}, {&(0x7f00000004c0)="1dd40b47ba77bd27ad11a4b29b3c132b4d669659172a3cf6a31de65943cf10ded1cb945a3c052f11e3317da842700315658eb71416a3dcc4c7788260dde7b7d24645118bd4fc8cd294f52cc5c6121b00175863b0795364320e755874f760e07c0bd0021876dafeed9d5eff1915b18b554767ac23f2b1803fdd541151c991675b482183c0319eb6b8cbdd1e7416df9a5e37cbb1dfd7786d2cd6f721364438a15a662d677fb38fbd115d54f887ebc0a425aef7bc8195fc2e364f4f0526b4c4fbbc7b7f425db11b4f7826522859fc42c393562bd00ddd81a8a944de13a01ac3c38a264dac9833fc53df26116bf8", 0xec}], 0x4, &(0x7f0000000700)=[@sndrcv={0x30, 0x84, 0x1, {0x57, 0x4, 0x200, 0x100000001, 0x0, 0x18, 0x1, 0x3, r2}}], 0x30, 0x80}, {&(0x7f0000000740)=@in6={0xa, 0x4e21, 0xd836, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xfffffffffffffff8}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000780)="74ddc4f77f7c660ad45a1132a663d68d9b43a1a4d16275d611b8eed78030b8979a669d29b96847f04178164263a80f5c9f5033130b56feb09cf0ffc8bf11f51f276cf193abf0e1bfa07be5ac134d0ee2d82ea0092081cd0503e58e8c390ab8c3782567a9013906bd4c0818315f8cf9e92a3272c7", 0x74}, {&(0x7f0000000800)="efc5e8486085e79946e220d7a9f8dc9d5c30f413280dfcb14f3c082902c4b0e8c5dd7c54ad760183c217930c8402e0fbd9d662f0e92fb50e5e93bbd72723320fd15af386cd9c3ccf2b65506f1a962a56daaa0891ffc094cacf17d4273195ee6fbe8cedab4a41557c87719b90b392843f1b60b0513d89c52b238b90f74a6dfce61da6da21e44f3a9c6b3a59a3abe27a21fc5000023cf2c744cd9fb1d3671566d5a9d9e439e2fe3abe1393ca5584d54f0ab74715ce53653844ce3a762b64a23cc825d7f94a5d887533e3582c23c709371bc5c3b7f0162022c16e728b9f00090364d92081f7f17d1666", 0xe8}], 0x2, &(0x7f0000000b00)=[@sndinfo={0x20, 0x84, 0x2, {0xda, 0x2, 0x4, 0x80, r3}}, @sndrcv={0x30, 0x84, 0x1, {0x2, 0xaf, 0x8000, 0x0, 0x7, 0x6, 0x16240000000000, 0x3, r4}}], 0x50, 0x40000}, {&(0x7f0000000b80)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000bc0)="089cb1432102d797364c36831e7c700d383331b39d5553a401c85f7bed9fddf7ac9ba467bb06ac7dc81112231ead4502cc4864f6c709613eec7bbbf5f694a483cdefce2806912156eddcb1", 0x4b}, {&(0x7f0000000c40)="83dab35c7b7e62c8655754937f033b0824c23bb9150edb0d5cf6fb3e26efcb96dac454b8b6037df8625c3cf2ecabe8ba623b52f55b7e0cc492b42ccd85b7f38f9606fb65b2969fb4febd6905f56d78ff2ac6c47cf39b5fee4a54d3990eb955b5fa96b213b03e922776daa40f232816c3f8e03e95956b7328dfa44ccd36d9b293f75eeefcd405656df1c0bf1e27e9ac904adbb9bca01947083e61ea1a9ccf", 0x9e}, {&(0x7f0000000d00)="b26b2be65f1a77355bb604bef42573a75a7bf57b81c4b44ea572290202de7459669b089fee35e946a437e71f9e98845119e71d6d14b2d8136637cb1de3513caa953ec16af8cdf44b7bb83f3d76c55a766ad9c593c27e3c3d4597189e82fe2daf694684e0e5", 0x65}, {&(0x7f0000000d80)="90c9797cb1edfb025cfa35546cfb792ee9142bb0bd6b5ba30779cbf4eb02c03a076bf5a36ceddd21ab12081c17565f458de41edd2a50baeb610bb13bdbaa438a02737d1933580da3779bcdb42ced1430639c", 0x52}], 0x4, &(0x7f0000001080)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x9}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x4}}, @sndrcv={0x30, 0x84, 0x1, {0x59, 0x1, 0x0, 0xb9ad, 0x5, 0x3, 0x8, 0x1, r5}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @sndrcv={0x30, 0x84, 0x1, {0x4, 0x7, 0x820a, 0x9, 0x100000000, 0x1, 0x10000, 0x7fffffff, r6}}, @init={0x18, 0x84, 0x0, {0x3, 0x6, 0x701, 0xe6}}], 0xc0, 0x20000010}, {&(0x7f0000001140)=@in={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000001180)="cf14bfa5e6feeb2ec4f871fc9e951f7f77f058", 0x13}, {&(0x7f00000011c0)="cad5b655fbcf57f8da07dd91120d15ffa43d2af64256f4dd1c909db9b488397d205ffd354ba72212006e5e843d31bf226bbf5c63f25bd54e0dd339e18c29834690223c80b1a7d9d2b629f0713dab4d58b93ea3f46145a6f50d221433197f02df0f5a984594066c83e6c767aa53352b846dc2f9091b730a6ac81ce1fe2682dbe04371b42d6715ff5c80ac55c182e4648298ec8f41b141dc6620e371", 0x9b}, {&(0x7f0000001280)="3fa525b976c4b5dbec836f61d908f0fb6fea2102fe3343618dde545c03bd03d809f9e680f6737b82420658ca0f0b11823cb043ed5951591b7ff09752850d72df6889031cc1088eba4e34517e27c4c652a88b3d5d8fcb187d129456c6", 0x5c}, {&(0x7f0000001300)="6d1dfc247cbf69e870be174bd0a086a67b1e17271a6828a9bfb161e0222c07f165291804c4fd6c59390b2ce04c216230ef95ae35946da2236040dc7b7926637c0533a7422c483863eff603ac160eca0e751b4596ae52eef35845361b0979948f705c3f07f841bd737a07c027ed1008ab18632497ad8ca0e4a8d92b782380b8842d779750073ad82d7c85dc47af73b6157199cf33aef7ab49ce708546781f0d23d8dd671e2159327bb971ddcf42f4d4fde60c53b0872f", 0xb6}, {&(0x7f00000013c0)="07c9880e03d358ca24a7e1b7a0570b551c0748b6b5d16cf6074a4a7684ebf613cdb85dcc06d6795488b8dc718637c332dfa5b8752aaf3070ffe8c8734959d36fc76009661405c14c9338fc1f46286f2474102f166da9f55d7f04040acd6f35c21b11dcdd3a7d3676e5472c15551537cc0fdecf7bd47d18b2d2bd50659bc16cb057320a3cf7a7a329ee5771937ba54a14544def4b8de60963031ed50725ba3501851582240767c84e10e51a4c034ebd4b51203df99a8ba1a46f007d32ee831467582350c5a7c490e595848495e3d74706bada9ad6a8bde94350e356ac6b2d3303cb92b0809100df99", 0xe8}], 0x5, &(0x7f00000015c0)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x200, 0x9, 0x7f, r7}}], 0x20, 0xe39a40cb4b55369f}, {&(0x7f0000001600)=@in={0x2, 0x4e23, @local}, 0x10, &(0x7f0000002900)=[{&(0x7f0000001640)="704d64b38d89bbddd720a46cb238799f9800882a88880b6f1525a23e38fe35c0f237c2e36f05003137b53afa538989fd03c96c33d47082fe576585fa7e48f278c873dcebe84b00732729358666ae31b7bda6305488475c813cd6d9126d2a7bbbe5a9b13200bdfa4cb52cb4005f93225ca8aa1350c344532660289b94710d2af319d1e522abade3e66637ff8275ad0d6fac32426a018cf1cbbd74c57a9e48bd1f9438707228d8b32693ca19f138073888e33654c03a25c31dea930f9fe4cf1c290778a9bf4ba075fade4ed8455e22019958bd3028cb79cd15b0388fe78089357ee3d76c10eb2125b8245dc93ae9b16c809de41111a8", 0xf5}, {&(0x7f0000001740)="1b9f9aa4b2ef3950f2079498dfcb4dee180bf9b3aaedba707bb7c684c0b1619844f541fd9e2ef2ea7d67427cff856e18c3c6acd1dd3ee73c897b45c5b6c7cf25d8186ddb525edea6044b80210541678a48a1dc0ae5745cbf302640e2c2619f882c039abbbe29e1105c751b5b04b8b75c690449226b4099431bef0fc538c20a8d84b14bfa29ceb7976cd8c180fab9a1d32b64336804a6d04505f6ae20a0e224c82e934d5598ac791c4d7cad17e7193fc3880eda613c0bf914529e746819cb02a27d055e9597821b8cd5d281e1a74388c73cc09a345a19d1a13f8a9cb02613ee85e0f89bdc931c6e52b995b6cbb46d1e3c162d6a7e6a94f18da2339c13d57c07ba3da8f3ad1131b8275a37bbb9cf9180d463714b05d1e6f305e3a2882698be6405180b7b275cfe0f5c972aeeb0e17a229230eab857b91650a1697d4ab88a53843433710e799584b0542a1a6bfe1dbf4b1fb742f32e981d759f8b287435fd59893fd404a080f6e56acd0d95d9ce6c7d3e76a8d0704df337c97911e59fa3e31028cd820b428221a1008c7bded37fca39f34143beac9e84b3cbba60d90b96f17cb7f939b05eb1b1f71e99b9e1e2966ba0554bf2631ab404c96337c37ed1355e449a7b996220478bb7c6debd04d175261317b7ce3206be28b9dfc437e9234526fa6ae9efd7540b42840dea7225ad475e09fa55bde07b1089a08c1b85fcffb758a538dbb1dca809c727b385c512a6c5ec88a29a8557992cb449b99b5daef8f5de93af6b68731130d4ee10fa7d8d62d3c60db94254f050da4a5d976819c852ba2aae90d2cbc0d138e0ee953378d68d36dab00ca992fdabf72a02044d393b2c133aa14066be52e7a61dd16e67a61fc053004b47a24bcdb84b6eb156e584d4199a7fcd16836ce9ce0f7be52246e153629f295228eb932fdd20c009de8a08c0a389469a5ecc5ab09afffd6359d006e0fb10d75906009b16ba44250eb64fbff9c4a4f70b28824f8d1ed8dee5dac0acdfd9d5ee15a1047fe3858c8825fbe2cecdca093730a19c681a2c2f8ce0514c9df9691dfec8cd954d234059b213ca12e120454d2982d228e80a3514bd03bdd9973214e7d19769c1e98b3de414c03b05243a7bbf90ee2b20a0e4ec31aed0d68e6edf909f39675aeb2b02a86b4aa58f4f84193d88e7b593993befcce3f7b8b051fed094062748eba600353f3cccd17c386715e962b2e16b495186aabd28e2295f85f4f4fba5bb76a3d80957b98c10d6520a2f46591265505fadc6f5144a7e0ded0f7385fa14a160466e25418725cc878cc42c0bedf2ae865b5da1a873a4715d08a573bfc14992b9160f4dde321d7202e4f87a16f96a6198db053b97b12990dcc4e599c730213682d052bfda1210a75feba64c83bce517e22310c266a62d89b176c0a14c95422b71e45b15b9b1e2589bb225a88f5b99b6c10746acd4f250d1ac84f3c3b7b1ed7fcdc58b02bf39dd203a81576968732c6b1303230ad3c99cdb9ef909f5afa1d3a8a5fa52a6a214ea8e950d779124b79aa3504ac27f0eeaf05790027431609b92e10a507ab7ff568483d3354efe88ecac60249c82a83f06648056424b0ddad6eb557cf0a0ebb25e06e17e860d7eead38e5426de17e9392ca79c0a53df6c030d66cca7a550fda13f72e2e627b6612dafa9a4732b07405e2276bbffff625162e69dff5719580899d375a9bf9643d187fa6389f87868f6f3fb048bdaa904b9ce1744b203e3a9bd8705627f756098ff3347fe38baefba21cf55f732ee403f09ebac0e0d037653ede327b00b13b937642b932fa1f7cc94f514b6143b28a19221b966b4a0b65c1d01f0fa0007206c7db868afbd16011c52aadb9d1fb8e1e760303e5788cd7092e7a9965bee97bd6cc6d3fee7d174450d147ed52ff53cda3206e1ae227f68399e6d03d9c1fdba6a7223ba7f8a1e6509f35bafcbbc59425d6b6862e6598415210e27c08c54c69f857b7cc6cd6bc416751cd58c1c612fdc70ec659e1d233ae93f51e1bf5484d237ec8f6d1df5eac3fa66e3951de099f82333e5f74a6854f8944b7361467c2bf4f2f367154cb415c70848a89f02c5c2b69e08448b38cd2cb5da2dd081c0af800cdadee5d84b12e17c9512b1aa9fd2d1836f6d85d41dfa48e85e7e2814fca8f4227ebeb26c4bf6de5a95696018fb6088980d14b92df6257425e9b70619732831291620211ca91a24c84d7cbc98b4b21a8addcb060545e88ae53fe754dc2cbceb457ea48833e3ec246e6bf180554d4fc3e59f0d7e0e126841124359a023cd30b78890ee00db963c48d9406f804a42f52992aa3e5e36da6b6d09eb2a95f51ae9a9dd93c3b4d4d0d512c597184518fa89292f65998f702c67a0146910c7c278a107efc4eae77e8955b8c78b3402d1f0aa44dc633a61c1cdb887cbce4ae09a9573641ccc5882e37f3714b51c30ce1ca14de0ab4b343e74f022a06a43f9e9935161cca4342416c2760b5c80dbb845b9bbed571d172ebd51db5879ae243a62ae4cde45b46a9724e701cda3ed5c8a8668731e1fb0217e2104cf3194ddb1aec268b1ced63157a4578ab4f088fe1d6120fd0d6f2cbd04bf24dbeac05ed6cc31257a1fb9149aff3d6405398ce6c29f2fa275ab82b41e33bee3921f8ffb3171e2446d3875ffcff95945e239a698e2090fed96388444f3b032802194fcf1e9909d8d813b3cf631b316bc169e8928830a087c40d0b70862bf7a23e513275ee0352affeeae5678c0edd25f636e1338145977254698a79643caf6f1c92cacd5200129a105aab1a8ff46d55d1b4157d7ecd5c1a6906651cca67937c1e4c9d9bb29d62b588fa8f5148030c6b104415ce6b6df5fce75afb291a914218ab5e0994545c02d9a040e40bf8f09a69bda47c61c731407cf7f8fe5d768e8508e6f4f56c53738cfebcde59e1211a388946db9e4f89c26594dc52e748474399c308f58e0a6622ceee3e1ad8d7b069ce9986feecc3cf3e87ddcc44cf13d8408851181ff81754541c8449e1da0a433dde62b2e88fee9909bd1fa40cec10d0de4b2863b07aecb829a102961be6aae5b13d24e2a3bb8c53f654c35413355c6d3fcb91c02fe286e686b5ee4a8fcbcfd860648ae06d23796cad2b57f4d3e723c17ce6be072cbaf257b6efa9af276502f2731cbd18706758615908173e4fbd443523da50b3787ae61c2166bb7c079102f5f6a2e0c91badc9e52421c435319d2257a19c036dd6be1714fc7a6224717b6a25593fc9f140a9861d07ac2fe8baf531c22c96a686893cf91eabef5a264f3f302a3c16a330ea7640be26807ec8c1ac6495d46e1fd858f594e3b960fed9f26fa18b999505fa69bb461821b71a89fce04aa9235593b74c8677a612e4b2b29a391a5a81b2c6c134ea26fd1cfc731b7bc3d50c6b2feebfa5f1ddc9a3e5d3aac0fa4f265b23b3d3a2c90ade9e4ba0d36d0ea28b21b38ad39ea9a8f91718bc655fb47efc61161be558fe5ea0e970dd48f2bb1da3045e9dacd96cd6908ac1623b8c23e423571134d1a1864922e8b5c90d277ba43e059b2ec6684f85e16b31d02ae20f205f669fabba9c0b0326cca93ab88788172efda8d131fb919bcd37c420bf2aa9192134c7923a5f0a4f6cac6ecedbaeeadfa6c4c85c5cbc1dfb963fa1bc8a83c575262f82686a9c06abc67ab648509b6bf9a7bda824ffde7628de20dc19695822f477a23f8e53fe175102e9b65859c52b7a32cda23054040e1fa21afb676b6df8d93b439d034823ae4db8e68fdcbba0f7bfa8df8aa9cbb6914daa8a1bb941755cf4ef34e476ba4df58b902f48c22682094192c02e2cb951ad3f3d9d7c79bbac44bf1c49bb3a89b05278d780e4e50134738ccf74b23e3bdd7042a2cd7dbabf22fcfe5b817701863cc7f5e04daa657f179d04c26e7f74f55c8e3e72c3eb4bd4e3d251557b2a8dc281f4937c462e85e3604e7c502af85fcbad22f199dcbae3ba744750878388894e65650e38e88fc8f4a65e6a9617e2debef55161f65c461df630a1ed52b371e0dcb4147f549e46dffc47d80a99008035d0d58222dd3d26325ff19e61f05aae71309da85b5d0fe5114af67a7a9613a5ad5512052c5d7d5bdac9c53f50d3728793810d9a1b274e4ad412509fbb05d1ea139c851ccce9a840b62beae111ebbf82cb9431f74f643af8d48afdd9f2c95d44cccfafd2e944f11e12c4862384db27c6288674a7c550e4b806769be6fde261ed62870038088bbc33978f4a5ece1e724b736326046d6faf30893682f7f9597b6026a7880a81a9c61145266966c36fe6225317be675cdcbe64beb8d3865d7309060e2c7c2aedba950283e597df3add7636ddb8ba0bd3db0ab9f3e67591fa64d6212562ab3bf5890a5acb45288a71b1a74cc480353e744abc15534561d4eff2fde248491c3a05da967e71c20b68276128ac3ad1dbe8a8ef8667deb9e818cd6fa92bd06cd23975932120a43be41f9baf6da5dffc6f5171d8cc4c2789b4a4e6259bcee45f9f09205ac90ad567d7c5c5ea883a54bfa330e337afe0a14197e498df93d472aa0a5ad5604044622cade2419508dba8bad700d5c2fb5967e7f00066527d682a2c848459d04c5c23646f7522317f652596255df0ff1b98ff4876f9f7ad992c073a0463aee77b5881fe8377e72e4de21a649d03aaa0e29837d73faaf9839e12eba4c4ed94fa5938206afd8292973e438fce8ee5027e9f8a03c859249ebf9fa462bb28fcbe9158c56916d363ed7bebd7a7523aa11c43237fc9d2e23d5ce0311c42210e73a13835f7ea3717c33a5b2d8ba4da3dbfb65c092c51d20077c852698867e804cd72859a7a2252f1489040e8227a35d1d0626e22ea254a9a4ea5a3923c54d55dc157ce2eda32583ba1f799a77c9b98640e6dce91a9071d3fd26ec66ace1b2a31c60e105dd24092e009d4e37e0515104265b7e555518f68971878554ab630cac0035e531ed6133d2740e3d8ea10e927c6afab982b106e74042a7b042b92f1bab2f247993fc1c4da2988e5a72064b0493143d7d9e05fd38fd8863134731aa1ca377648abcf056ccdfab4862159b699505c9a4e79b25faecc41fb64f47490ca9ff68760cea237095e17274310fb131788bf865c5dd1e1fbec0edccd68dc028f2f6cbc5ae25478a63349a5ad3302843400886b406facf4b0bdbd653643512ba811052b6a4b5e9d01f9b14b554e89473111e3d8a88d3f8e5097e4fbbd66720d952571d7697cb8ee3f4dd51c004cf056bc9a03c21c03e3721fa43d1b94e58befc5b7d279e8f43d136b128567439762a5aff712eaa584783c9c28abad697e1f4e71f749b808d905f99d637832c7e60b2aa2901c41dc1a9f465fc7d20d668f97ce607820e6fa74a2f0884649ca05034e704294eb9639f789d1136cbec268898ba30ecaa416b4181e428c81622a1b4a102bc588cb1d4943f526ed5cde5107038983e32de4a66a8ac5d5c41e31743ce469aa26fffde7868c67a17f70480ed4ec4d025d1bfc6e7dd7b653d08f53e60b1b5af6672c33075d4d8a8c4fd5ee43393b45fe3908fe1d559997dd5fbe305ffc6486e0fa37061799f9d562555b2e5ffaf4f2fc025a1e927a0152a89533fbd267994e196fcfd69e1a9cec82c1218b21fc41693287cb1db50a41fbcda937677776c26120ca036798c5e2109ee57b8a5db9bd1fca9da4c485604ffeaa8f9d614bfe51a0898453c7bc162bc33b4427b21de65a126ff0006164100ae4d1ae8b69c9a70dfc3366d4868eb59c1dba1db818b8907fd159aa846ae9b697c9ca74036693a5d68e90b341305bfc0969adbb2", 0x1000}, {&(0x7f0000002740)="f65f040e6958c2960681a0854149db239f11472aba9cd804e95ab3459c838bc8858776b54e9e23580b65e2c7ba9093db5f540fd4b9e6fc4386e3799d3b905952a8e260cc0aea27bb32c42e75a4a8a647492f1ef4e85933c9707f94699a1a9a55461055170e0ce76d64c30deb06c826160f6080a84b1e06af04be34e94a400c94b439bcd48dc8c21707f0582c60ac728550ed5ad4300366e14b746bc7b669cadbac7fe1941df3ed", 0xa7}, {&(0x7f0000002800)="f129896b6ef9c42f450dc718d6d12afce5f3274892ea2606f45af062b3128df09f2891933c25ae6b0defa03d27d67f37d0485eba70ebf22fdc1eb394e6f72f2af78cc932f6c4ff", 0x47}, {&(0x7f0000002880)="0bd6f007e2ec465f32fb0d011b5250087fd09392", 0x14}, {&(0x7f00000028c0)="711235661c08a80a2e102d76833ffbe79c036120431c1bf74eacc90c7f4e186237aa3923dbfc6d8ca0030702c2d0a9", 0x2f}], 0x6, &(0x7f0000002a80)=[@init={0x18, 0x84, 0x0, {0x7, 0x2b, 0x4, 0x3f}}, @sndrcv={0x30, 0x84, 0x1, {0x2, 0x0, 0x0, 0x9, 0x6, 0x6, 0x8000, 0x2, r8}}], 0x48}, {&(0x7f0000002b00)=@in={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000002f00)=[{&(0x7f0000002b40)="948aa17b8dccf63b1263bed531dc12053b7c542c21441839184f456f0d9296fbda3260542df507cd943f3646baf21c23eb9545fb91f54e83d472ec3314ccbe2ea70a", 0x42}, {&(0x7f0000002bc0)="76328d15cf539ffb9023df51659614b565412ab93eb935c22ad8110734e6b2a26b3f6d51b74ffde113845c25b90f84ba12d35f46bd7b5305286ef8b908111b52c53d9b0a744d1ead5827c70b28edab36a93529137758d77ae3ef119601633a4690b416a69594836215c9eab43f38", 0x6e}, {&(0x7f0000002c40)="c7a40737ce39da49a0aa31ab19bf79705b1e255afe308c2a3559a4b94496db493f0f31e4804611afa179339d91ececd150c884730f02857a7ec99b3b89b56043351b3ed1783f7924443bdd2ab81a714b4d38827d5eb2c903ed9616c48d085dd9406103c9cd89b1de5bf499586f414b638c0a62a2bbb369d1c1db09a24a372657f2ecc0bc87c831e1f8107edbf8", 0x8d}, {&(0x7f0000002d00)="e5eeab65052959c238cc1e47475cfdedae03d5738ac38beebffffd05fa7d", 0x1e}, {&(0x7f0000002d40)="38b68370aff9c25c3026130bd7b9855785cc84b25cfffc66d465a589a2170b3303d058f3e2700dd17827c935889f92c024380dd56d61ca741f15b8f1f92b85c29860bdb17cb276507cb2990965fc163a2b2e3a3b4b9fd52f4de6333a8aa11bf8d3e5bc940147cef33f638a67d87b74f58f2267e5b8470c0ca2aa77ec057251181ae47d96deaead90543d498a153b1f", 0x8f}, {&(0x7f0000002e00)="74fac477605a041b034d909a8bad31591d5a19fdc288e56a75e8f6b161fb038e0cc23fb803b3be8179d666c9d8a18ac7af85361ad5f9e9799ed7dcce06fbf9523f1026d1b1c5b146b8538aae0cab7824f3a0f7d3b0ea9501d7343c55ee7502a0eca8b8299605cc57bfc3d529f429c0679449bba09df3fb7c52321bc2251ea888fbf37e418fbe3662866838ccc152ecc402ca6d4e1b20516aaaa01b97668f0775bd8c07ae2f3b78835cf0a4fed220d5f48badd1fe85aac685accda75f6caf7cd61af274a68b8858b1984babd0", 0xcc}], 0x6, 0x0, 0x0, 0x40000}], 0x7, 0x40000) accept$alg(r1, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) fchdir(r0) 15:30:01 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0xb6, "b3d4e39e4fa7615c9b3f0c81988339471aa672ef470633ee265525146915afda8f5701c982cf2e3c559be6f5ca7e848e2ea3d7ab0244b0290de0bccd9a0b3f936e4191d562e2309dfa084ed807e7ab183fcc0a03f0a04e7262c1d532bbd8d4149ce6598c6c5f1e632cc3a722f2a8527c45c3bbcfe2e22b7bee3cb2ea4378db600111f3d57d68320c51067c32f45c9d9a1fdddc59166c3fa688bffaca76415c426c26c5a16a8534f93cf3b7dd7f5353d00173f2a4f9b0"}, &(0x7f0000000040)=0xbe) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={r3, 0x100}, &(0x7f0000000140)=0x8) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) [ 2101.759817] misc userio: Invalid payload size 15:30:01 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2101.780227] PKCS8: Unsupported PKCS#8 version 15:30:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x800, 0x0) readlinkat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/166, 0xa6) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 15:30:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x4, @rand_addr="63d40db961a3f72542828d0b21352e2b", 0xf3}, @in={0x2, 0x2, @local}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e22, 0x71, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1ff}], 0x58) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) r2 = dup2(r0, r0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000000c0)=0xd82658f269b72b9a, 0x4) accept4$inet6(r2, 0x0, &(0x7f0000000040), 0x80000) [ 2101.843048] misc userio: Invalid payload size 15:30:01 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x39b, 0x100) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:01 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, 0x0, 0x4fb) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) ioctl$CAPI_GET_SERIAL(r3, 0xc0044308, &(0x7f0000000100)=0x1000) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)={0x164, r5, 0x311, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8919}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f7}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd8e}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_NODE={0x40, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x78, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9883}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xafc7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000040)={0x9, 0x7, 0x41}) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:30:01 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2102.030687] misc userio: Invalid payload size [ 2102.127745] misc userio: Invalid payload size 15:30:02 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000100)) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000180)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x1ff, 0xa0d, 0x0, 0xaf, 0x3, 0x7fffffff, 0xbe, 0x1e, 0x6, 0x1f}) 15:30:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'btrfs.', 'ppp0/\x00'}, &(0x7f00000000c0)=""/217, 0xd9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:30:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, '/proc/capi/capi20\x00'}, {}], 0xa, "cdce5d269d2f6342a11b2c84dddca27acad294efbaf2c1928fec2e9e0354e9a2c4a97dc0b257f4acd735435c143d0c12d02acb82af3207ce651193686bc252bf21497c14d7e3d385d97e22d7892af3647be2335630f3ecffef868e463e9c73116dd195fa9fd21e2f33a5d6881d8a4902d47efff9407c2a0d05c703a368bef3931475"}, 0xa1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f00000000c0)={0x8, 0x8}) dup(r0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:30:02 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x4080, 0x0) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000080)={0x1100000000000000, 0xf000, 0x3ff, 0x1, 0x9}) r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000380)={0x100, 0x7, 0x6, 0x3f, 0x7}) r3 = dup2(r2, r1) fstatfs(r2, &(0x7f0000000500)=""/198) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) r4 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x5, 0x101000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x5}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r5, 0x3}, 0x8) 15:30:02 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:02 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) epoll_pwait(r3, &(0x7f0000000040)=[{}, {}, {}, {}], 0x4, 0xa908, &(0x7f0000000100)={0x5}, 0x8) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) [ 2102.609774] misc userio: Invalid payload size 15:30:02 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)="98e45251ff2cd80160b85ab685b999e5d87b663130cac7bf91a9d0d92754d499204f413c98cea3b68267683cf8452a5bf689b580b4c9bb0b9c562463765cb39a08ad2fe636e9ffa84c97d42dc2f8d3a7e7fad44e5d4147c022cfc6291ef5b6aeb7b8ab82ca3561464ac947738963210085a08a7b322ba0d8fcc4bfc9eb26b5a47549797aa245ed2aef97bf266bea5bd52a6992a169c2f3e36f73169ff7ec", 0x9e, 0x0) keyctl$instantiate(0xc, r0, 0x0, 0x0, 0xfffffffffffffff8) r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:02 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:30:02 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)={r1, 0x6}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) [ 2102.724785] misc userio: Invalid payload size 15:30:02 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000040), 0x4) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) recvfrom$rxrpc(r2, &(0x7f0000000140)=""/55, 0x37, 0x2, &(0x7f0000000240)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x7af) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) close(r0) 15:30:02 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2102.861714] misc userio: Invalid payload size [ 2102.903360] misc userio: Invalid payload size 15:30:03 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000240)={0xb, @capture={0x1000, 0x0, {0x10000, 0x80}, 0x3, 0x3}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 15:30:03 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x10000000000000, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:03 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$setopts(0x4200, r1, 0x1ff, 0x100000) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) 15:30:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x400140, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x100, 0x70bd26, 0x0, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'ib', 0x3a, 'team0\x00'}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004814}, 0x44001) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="66baf80cb867e1c08cef66bafc0cec6766410f38806c2317450f4d030ff988d0b90000640f01be52f300000f090f20d835080000000f22d866baf80cb834951088ef66bafc0ced450f09660f2d74a204"}], 0xaaaaaaaaaaaabd8, 0x40, 0x0, 0xfffffffffffffcf2) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000240)="c4e18f59aafcffffff8fc80086dc6e83fc990f20e035020000000f22e00f20e035000020000f22e0b8050000000f23c80f21f835000080000f23f8b8000000000f23d00f21f835000000000f23f866b8c7000f00d8ea090000009300b8b784b2380f23c80f21f835040060000f23f8", 0x6f}], 0x1, 0x2, &(0x7f00000003c0)=[@cstype3={0x5, 0x8}, @vmwrite={0x8, 0x0, 0x1, 0x0, 0xb113, 0x0, 0x3, 0x0, 0x7}], 0x2) mlock(&(0x7f0000ff2000/0x2000)=nil, 0x2000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000300)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400401, 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x2e, 0x6, 0x8000}, 0x4) sendto$inet(r4, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x27b) sendto$inet(r4, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:30:03 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x33000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:03 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x36c) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) r4 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$vnet(r4, &(0x7f0000000100)={0x1, {0x0, 0x0, 0x0}}, 0x68) close(r4) openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x10, 0xffffffffffffffff, 0x200) r5 = syz_open_dev$cec(0x0, 0x3, 0x2) write$cgroup_type(r5, 0x0, 0xfffffffffffffe6d) [ 2103.550768] misc userio: Invalid payload size 15:30:03 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3c000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:03 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f00000001c0)=""/184) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {0xfffffffffffffffc}, {}, @connect}], 0x30) 15:30:03 executing program 1: r0 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10, 0x80800) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000180)={{0x80000000, 0x2, 0x4, 0x14a, 0x100000001, 0x800}, 0xffffffffffffff81}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000240)=0xffffffffffffffc1, 0x4) sendto$inet(r0, &(0x7f0000000140)="89341dfb99fb928d54ec947d7f4e2f814a43af5c4f036bc7d8adbe8f8fbead13a84ccafc4e472b9f2c62a3ae3a", 0x2d, 0x0, &(0x7f0000000100)={0x2, 0x4e21, @rand_addr=0x401}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000001c0), 0x4) [ 2103.689666] misc userio: Invalid payload size 15:30:03 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:03 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20ncci\x00', 0x101002, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x3, 0x18c) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x94, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0xa4, @mcast1, 0x8}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e22, 0x2, @mcast2, 0x3}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x25}}, @in6={0xa, 0x4e23, 0x2, @rand_addr="1be89a9bc83adf1dda0559a99a39c4d5", 0x3f}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000140)={r3}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) finit_module(r0, &(0x7f00000003c0)='vcan0\x00\x00\x00\x16\x00', 0x1) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0xfffffffffffffe89) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000180)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:30:03 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x58000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2103.919178] misc userio: Invalid payload size [ 2103.995883] misc userio: Invalid payload size 15:30:04 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000040)=0x8, 0x8) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) setsockopt$inet_int(r1, 0x0, 0x0, &(0x7f0000000100)=0x3, 0x4) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:30:04 executing program 1: bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x200002) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000240)=ANY=[@ANYBLOB="0700000000020000000000050080000000000000000049e5ae89cb446af00b56d9ac3c357d0354cc2ebfd3beee5ec0c8ef624fbed6877911bd27066e7bd1b3fc5826bfc8734bf986ed4bbaff3e4f83b87ba3422ffe57452e6979f3f534dc82195e1830403000000000000098b23f271d000000000000000000d17e4605a9000000000000000000000000000000000000"]) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x229) socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x100000001, 0x4) r1 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x80000005, 0x0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000001c0)={0x1, @vbi}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100001}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x1e8, r2, 0x14, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x16c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x401, @mcast1, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x316c}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'eth', 0x3a, 'ip6gretap0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, [], 0x21}, 0xffffffffffffff80}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @mcast2, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x51c6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe86}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xdaa5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x8080}, 0x10) 15:30:04 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000040)={0x7f, 0x0, 0x5a7c, 0x5, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={r3, 0x4}, 0x8) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:04 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:04 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)=0x0) syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x18381) r7 = getpid() kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r4, &(0x7f0000000100)={r4, r3, 0x8}) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:30:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x7f, 0x10000) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000140), 0x2) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x5, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f00000000c0)={0x2, 0x1, 0x40}) [ 2104.489765] misc userio: Invalid payload size 15:30:04 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)=@hci={0x1f, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/12, 0xc}, {&(0x7f0000000140)=""/7, 0x7}, {&(0x7f0000000240)=""/133, 0x85}, {&(0x7f0000000300)=""/166, 0xa6}, {&(0x7f0000000180)=""/56, 0x38}], 0x5, &(0x7f0000000480)=""/252, 0xfc}, 0x2000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'ip6_vti0\x00', r1}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/snapshot\x00', 0x1, 0x0) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x15) 15:30:04 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="63460bd7f835af035d42c395fdef2caa5f2b2036688e7f46b07dfb1a4c99cfcd512cecaa38aea0fd7ea0165e34b73cd24b762f7d6006c0bcab915b6e15a86f1ebfaec0754f620b3c060c6877faa841a68ff8205b5df24912a1d46e71de61f0a036048c241cd80000000000000000000000000000", @ANYRES16=0x0, @ANYBLOB="000028bd7000ffdbdf2508000000"], 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x200000000000001) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) sendto$isdn(r2, &(0x7f00000005c0)={0xfffffffffffffffd, 0x8, "a17689f564bd778000000099f6dd741b830d998a7bbc7c7c40a12bcb55f55b4ba5bb9038b1697fc5db70f219a162deb8ad643f10e6bcba23b538631b6efe0b200b7ab4c29eb7ed1b8fedae958ba4f836b192"}, 0xffffff4a, 0x8010, &(0x7f0000000100)={0x22, 0x4, 0x1, 0xd, 0x20000000}, 0x6) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000400}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0xbc, r3, 0x70f, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2b1}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) fstat(r2, &(0x7f0000000040)) creat(&(0x7f0000000580)='./file0\x00', 0x40) syz_open_dev$media(&(0x7f0000000340)='/dev/media#\x00', 0x8000000000, 0x2) [ 2104.576771] misc userio: Invalid payload size 15:30:04 executing program 1: r0 = pkey_alloc(0x0, 0x2) pkey_free(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400400, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f0000000080)=0x5000) 15:30:04 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:04 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x1) sendto$inet(r4, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2012000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x58}}, 0x10) fcntl$getown(r4, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000100)={0x30, 0x3, 0x0, {0x3, 0xf, 0x0, 'vmnet1mime_type'}}, 0x30) [ 2104.813698] misc userio: Invalid payload size [ 2104.895463] misc userio: Invalid payload size 15:30:05 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast1}, 0xfffffffffffffcff) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:30:05 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000028bd7000ffdbdf2508000000"], 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) getpeername$netlink(r1, &(0x7f0000000100), &(0x7f0000000140)=0xc) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000080)={0x1, 0x1f, 0x426, 0x6}) 15:30:05 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:05 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:30:05 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x117, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in={0x2, 0x4e23, @multicast2}}}, 0x90) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:30:05 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2105.488205] misc userio: Invalid payload size 15:30:05 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x7}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000002c0)={r1, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x1f800000, 0x5, 0x61, 0xaa5, 0x8}, &(0x7f0000000380)=0x98) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x101000) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f0000000080)) 15:30:05 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="81068e0b67cf71bd59a8fd1a44d9e159ac5edbac8dd6ca927cf5824d15f7506cdfc1da8cc6b608b7dc6e6eabf033c8370f1278987f072197f9e2ae9a22be9db7d93a7bfeb2451cd4027c404f9d0535f0fa8fd1814db6feb4cbc8097d46d7384063a129", @ANYRES16=0x0, @ANYBLOB="00000000000000000000090000005adf94a84c3de8599e317e5f9d71a0a84f101acf0d19a334aabe0ba0a8b81b2b9a39a6459340354b89cd2b002493890f828df4b1c67814225b98c7dd4e27238ce28c7cf4aded89"], 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)={0x440, 0x3f, 0x400, 0x70bd2d, 0x25dfdbfc, {0x12}, [@generic="4343a48657", @nested={0xe0, 0x9, [@generic="316caad6aa12f90f2dbf26c96ffb38847c4333aa545455ac6817e9322f1a015c329a18229efc0bd98930d721d59886a4a0887a35a7c9ee59f405f31b05e82f57b0ae9fed2cab0ac7e2ef17ba05d67b2bf425561924b043d925d0bd4914ec277ad33feae4efb1e9560cd62518c5d58c17b58fc356f133864018ca2841e5b7f92120797cc94367a64a0be98e763e0034f63623915ea18a30a00622f874e8831810328c0c71ebd2aeb266bb5c6dac1ec2e0be9dbf571131e700e7801c96774b57c35fbc95c61f44dabe76af31d22f7fa2887ea419e6b660d66ddd"]}, @nested={0x98, 0xc, [@typed={0x8, 0x2c, @ipv4=@empty}, @typed={0x34, 0x3a, @str='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}, @typed={0x8, 0x7d, @pid=r3}, @generic="7f54ede826164b3ec457205c767900d477847eb8239f1da055a016a5dc3ca7a9461912ea4e541c2717bdf9036d9f2c1d12d56c48edca65a9ba4d485763a944bd2d0ade3307bc9d686370df0a5b"]}, @generic="2789d0d2e3f0ee42c0cea81dd2406559063caecbb09af769c5c47b81154c8e0c9b2a2d27425d13cb8022c7644b0082", @nested={0x280, 0x2e, [@generic="73f12e8507a5df159f3efc680fa03e4b21c37bb15b8e5217a13e2a1437623299515937c422cb8f9dab6e617d9a467cbc1fac7d1d3f513e135d2d335da72e906fa1204ad88fbfe8f4cf040a179cc7213710028298a763dc8f268d0ee54d026e086ab3b0033c65281088fb46f5719e9771cbebb9c84bb7b2f8bdfb9f", @typed={0x14, 0x48, @ipv6=@mcast2}, @generic="563f359d9dbe60433fbf476ea021e89aa1776a05103885afd417a89298bf8576d955712e5573e270c2982d72e5f0025cd613159a28179f1dee9ab4b5dd1ab6ad962396a97957cc6bab6abd7a2738469babd7b8db4ded41c18ca154d069ada6d1f3f59c9d57aed333ad24a463cf0c4b6dc08515e26a3430d92082fc88", @generic="281e98dd063e02f69ee554dc21c98f597864cc2659b52b739c", @typed={0x8, 0x2c, @ipv4=@dev={0xac, 0x14, 0x14, 0x24}}, @typed={0x8, 0x57, @uid=r4}, @generic="381ceb1e6c91a498566e6aee6072256f0a2d0f11afa44f20340ea4184eaf3dd9f3ca41baae8ccb4b724dc2947759f789e2c7120816e2c98e4b765e12d7f6d27c714eac317c5ef56d1006d779fe7d67e05a12bfc4f585165eb1fc574254f8e4441a77e54edc3ad9065e458ff3a27fe31f4fb00f95d21ca0c92ffd5778425625aa7a5baf1da5d3641e72db82dacb28587b05b6800c227a2b44ef2923e01a44d89c3bc17c9418f496", @generic="8ba22485d4bd8fecf80a3c84cbe508196c922d35b506ba08dc798caff15ee3feb5044542437d98fea3399a25311d28b527c012b8d21a460ceaf99a1b857ad845864bda766dc6bcc7824f9db615c2933cefcad6d18fa40e4e90f1dcada4899e676ec817f5e2636e84551799e082d31d5e134903ffb121d81acd4e5dd167cbd1909df630efed67ee2b2d745300e602109419523122c859077c0d8ec5368f46ac"]}]}, 0x440}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snapshot\x00', 0x1, 0x0) 15:30:05 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xb959, 0x40040) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x50, 0x4, 0x407, "c89a88f4466990f7a06a3553b9fbf9e87eca9b5c4d3f2e8cb05dd568178973a82d4b4f7b6b68c5639b93269e8367f3748e40f9d8dfc1228505296916b757fe5dcad7a0c8575e15a48e63810a12f86473"}) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) [ 2105.643256] misc userio: Invalid payload size 15:30:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e1e, @local}, 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x34, 0x0, &(0x7f00000000c0)=[@clear_death={0x400c630f, 0x4}, @enter_looper, @dead_binder_done={0x40086310, 0x2}, @enter_looper, @decrefs={0x40046307, 0x2}, @acquire], 0x5, 0x0, &(0x7f0000000100)="dfc68921fd"}) write$capi20(r1, &(0x7f00000001c0)={0x10, 0x20, 0x47, 0x81, 0x1ff, 0x9}, 0x10) syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x9, 0x40000) 15:30:05 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:06 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:30:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x14000, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) 15:30:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) waitid(0x2, r1, &(0x7f0000000300), 0x80000001, &(0x7f0000000380)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00') getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x1d, "d531e071157b73e9d68327c00391fc3558fdf3fa08b3ab1e6ce1a86623"}, &(0x7f00000000c0)=0x25) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000001c0), &(0x7f0000000240)=0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={r3, @in={{0x2, 0x4e22, @rand_addr=0x9}}, 0x7d, 0x4}, 0x90) 15:30:06 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:06 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000052508000000"], 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:06 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xc002, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000240)={0x0, @bt={0x80000000, 0x82, 0x1, 0x0, 0x4d1, 0x4, 0x400, 0x1, 0x1ff, 0x10000, 0x8001, 0x3ff, 0x1000, 0x8001, 0x1e, 0x10}}) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r3, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0xff, 0x401) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) [ 2106.397642] misc userio: Invalid payload size 15:30:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x3, &(0x7f0000000480)="27feb3d06ffaf1632646e76c944bb45507ccf7f3a96c99b7db24c346c32cd108095a1abfe5aaccfb758658fcb84c0f7a82425aad7873353a37999e62128cfb92cbb2b41a412ecdb641a7ce6072b97dd39d593a2284e0a75b394b1c76062899ecd4b32c5a5f5d110ae498d0be462d11f187c1a726c5d66a668afbed989557f1ea4e67c0c28bc5970194336d17cfd9d32ba7fdc99e3530916987641c7a8aba552ce63e9f2694faf8affbcd472866e349f484c13e7190be2126e45a7282f72e49036971faeeaf8b4098675d3732df5ff6a4c2146eb90d9e3760156bb46fbc8d381caf2db5908ee15ebf2ed7167a489ed13704c697ba8792239987fcca44b958be203525a7bf860c317b84aac98b4f883a1c36f0993bc5b564825bc7b01dc04e46ad3d86969350f7acc8448b8199afdab544b136a5693a5013925e101a7f9a3cb302ee10825386573458bf3dc30778c9e3f9f0968955e2998de25bd00b4f6a85b2e147b78336ebd6a89eac5a99dcffebe2835992f741f5e7f1f7fed55da108ea25683c001d03b73abb318f832e57d9276d0a0ab322ba451f260e56b8f840c598c8c6bdbf522aca5321729afa5f0a4ce15bee370b924b86011dbf9b6f5e037253314bb32b7f01a9c7efbdc96b92593049348013ab3ddc0f563b2b5edf6ae9171c575d00c7402418de1f233820d97f17b5688327ce2be902486c85b11b049a9c882616a340c41b24486ab22565d089e772d42d6e17038a7e651b75b92d77c0031b1507da0573322e38b316d052d90d28572dab51e92a1cefe7696e84931c7e121ba3ad5ce774ab9dc540c0f125197bfd2768040d3d727458c7c4beffdb37a9cc55af0af7a367f950d4fdb428433ca09a1edab9ae3fab2da2848e84c270a05c08d0f3ebdd7351dcecc1e2677e56d115ee1765a7aa96ae9576ed74f3cb2de540e3d4ba39bdbfcd63e912d668b624196afa426c651ff8e1d60a72af5bbdb6706632e5ce30a16465f2a9980c01576b2ea4318345b90c5a5145d7142e7ab9b60327b1213383e8d36ec9a2a758cf5eccf73ac2eb47fe5bca657554aa48a788559a633a6ce14ec2c6f4bfe3faf76752f8446a7ee67caad7e1b254d9466f4e0c98e7c7b730763d9f6905b316befd82d3f15f5720f9c0d71c49bf81d16598c98184c1959b6073ddd8067ab8fe4ea798459a0d641ce353a773f4a2fb3ec15fc7bdbc6ad2d4bb489e2ab4fdf88089424969c96687320771e6fb90de2caeb457587bd961fdeee1cc184045d2fb244f4cd20f44095037be15a42283dd8c2d0053417799d66c52a21a54b82dea34edab4534308e355d09c6ceaacf4614b0fd77f43238c27383efac24b41ca32eccadb3105cb556937051146827c299a65ada9a8f0ad6b40d378f56ec82b92a5e08809346befde70edd4f1e2c3e360b8eb3e9c8b5ae88560cbcd38ab105beaef530c8761ce2a1e75fe745965b195955127ac101b992d7b1fcb7bdb03130d557e25b1cc90438ba9ef11811ecb189e9dc46150951ea5c613dda77737857c09f5c6dd860f189d1e95a04d94b03e49bab03f07c016ad359b44935aaec43f9f6e83810c743a873852c8d455145a8e9b6b52e3e7b5e9bfffc76e18969a3470f4ceb6ec30d6461ca27aa54e78a541b8c1d026b61c1e38ebdd1652cc21b6cda6b728c962f7a526dc144669014d394bba627922aa143fbb26a450f683802b3b9d1c64e36406584fa2b1d7575620da2ca66d2f3c7d0d1513b37d3cc56b39c414500469a1476931cbc010e61a8cafb4ff4fe961967bfd5f6f58611ebe328f1b20958e9fd036e77c6bf316cd2a1c106ff3ff0d1fea08400a377d1d999124e91cc13c6fc7ebf48bb13cd0311fe06552d3b03693d8b279dba704a44bdeebec6a33a44709a5c58a6e8bc6220492858779c63ba76b38b05d1c282a898112684be3f452d52a7619fc2d477f9d12551f9b3b39069edd1d89b8ce90db2f7801d1455fd82bbe58820bbe1543a5c1ed2edd638aa63631f2b96abf09473fc2b4cac6cea82ebc7f864247c245f108b26026b7390dfffbf82df662e916d3bb1347e01d063e88fdc59d1dc8f2322cc3efbd40e75f06a09259fcc562d63ee1adc52a7f7d77251ef6ee2a617c6c3f5209e0e4717d5a6ea5a57ea22ca78a1a49470fe79a737141d9d6948b7c4039bad813b29b7a0214131b880b3273012b46ceebbf1692e4625b0b224f40c742d6c32b3b3d386302c82a0a6353b8996251a2255a2d8dac60b3de58427852267e9301d4db60842a5fd9b16c26683a6a5eb0b8fb07210a8a034154a2714c0356180369a389e8b3af9856b04d5a047abfd731a84d6318ca9d74eb07163c199c328baf7a8b312ebb11f0f2c66ea3444cf6566d0eba625b8800fc74eab22bb24bf8703835085fdce14a6b0453586d062a46815f925c9e3e4da4ca01d7d22f8b66b1776f5d516af37610b4622a89079930fff1a0a81bdcb3a72b598df93b219718a3b1a3ac750e403fdfbde61c66c7b8ce4117987a683de6f7373daf112c5c6c976b8f9f2f31155b5640abc0ba8d84491dae266469760ec81391fd823f4ea8a46025e707739661ad867de9054c77a18f6e7d444febe6eeb86a0dce3c8c4e5a67cd59d0cb837df57b13a8291078cda82be9e8a27be2613d3c8f425cdef4d1f1a5081aa1462d24fe1dee34a613a148a17e6bed5e680d9120978244c481737179b9dc56b452e2d51d9428aaf2c7cec74cdfe24eac67467f2f7cfd96fe5b266ab5acea1270b4e8c4dc66ee0d98764b166996fafc459c605f81e0ff49865ef8b62d977c4432be9701e9b0936d40054ade610ca8e06a46003880d2f54756144a4647602b3cae06f45dedc9d2849ed4243f6d14408362bafaec47b31af69e6614d8e65e0b16036d89832aae1dbe704b9f0d248a62fa549672ea546d3b6356da49b8531156d6a058813d55cc08faf0f432d1989579d2fc15f9115b8c1cf3f50e143365dbf0ead983a1f5c7c329d7683ce231bcfc8464d3eb04da7ddd1587297aea5f6233a82a225d53f623c8b681566ffa7cdd34280945e80518d404b0c296f12ed387e245aeb4218348de58fa951cee8bd6c522533ea856784d02ab40996ed120013f9ef660d1ae4c21dfb3a75d70bfc75cd2f01748c339bffff5d6f0e14eed28cc626ced130fbf3fea4835809790469c52ca98574385eafc0a1aa44e0848471b86e7fd3f248fd4d131573be4e64a1c82fd9a94667199acb156a965cadf0979965ff1b90cc0bb97b35ab9290d860af1ce71df00948c6595ba27b16852d7b0481dce988b4bea69b1f7ddedca8dffd5816351418401588758746de10ce76288fa3f5478b1492b76989af7619b5bdaea0174ebec341d188353ebdfeccf0a578679694e9e44681404032c2a25d42db147e4086e987fe1ce9e9bd352ce376aa41395be93214d5a0f10c97e76b65a82a9d7d378c062f66f99fea00861f13866c8c1a93ce64e928c340a3bc46dc8165379b9d7aed83d198798dcc41f796e6ef5f42c6581b8f1db0ab89ef05eae1dd41ba704f035da4ace4a4b7b1d405081ca8a451903b8160ca6ff0b9678b0099e435f40d0070e5856da4bdb8bd65400be54d2e341708738aa74a6d73672718dcd97635355549fffe6eca5525d2bf7453ba87293d4f3b7fc095b54d73b0ca7a3d844c592dd0b167ecb317bb62069ea78b0d311d4042fc7bac16cb0af5f7ba65227c3818646bd299c68c934abe67184d2ba8c91fa30feea5b49e74a20760ce7068dfa7d7a9315868dd9014ebcba76fd70975137849b919c5b8fff4682271fc9392ec7325ba8467747389b10462509dad9f2c35e77a7fc16eeac53e1491da0a5d0352b1fcef5b3dae9e2c2f7602f1f16424addad7ce49437110bd543a9f630ca334214e05c6416e26eed19e44090a41922b2cea6a2a823d3bdcc907d0e6d0e662eb98c5fa733a4ea8d386fe5a7521eb5c2b4deecbe2200084df75d3b2d89d80833b455b2439308cd6a28b1cd7a10f6626764ce88b2408e10f26cd3ffb5019d063f8acc3012da61567294509edac22706b258265d1de9f8820e7c0a660b9b01ab41a4a5c95bf0872d624f27ee5a5c00d25fc7f2a29affdd0d1b557589f043a9cc3e0bc8029cfc0f70b95bee63afc63034987ed0d23db2b0e42f1914eba86ea254db3b15511d05fef2edef8147cddaab8daa360639bb55d79ae00881c696eebff14c655eae38892cd7f312c96c64ad097082af3f8296485ef2792e4ae6fb734b493c16689ef560fd02df80eda3d235d983887aacc903e222ba03ac4728f50a1f1acf8d35687e8610f436b43c3a7bbe7570576710452140608b291fc493efe3268c8de908589695d0d845577ee617e1a9416692aa59dea924c1cf45336a6c7a7f94703b70658db276586bb0b71f7ad251ed980a0501592692876329836c35438230a505a7772d14f850d8e8b7e5f1e1ef0259a677890acc87cfc7d6f60f24cccd9eafe73b55f7ef8fdcf4080ac7e71c3afef7e68e5bd790a3fb7a04b0c5aebc6dd40ced4473bf38d93fbf5084db1c12591b05be5ce9553cdda9b45aa030a749810db57dc79c70687f7403b94d2dbd086392bbc8f758ef27637821ea5ce9e27184100e8d1caa25bbceeccb7a7d07917260bbd09d4ded2a970d5882ced77fdae1ff02b25fbd08614a6979f2aecc8d4dfee4e91d92ebbd107a9d0f909a9575581c5455a57286ef4ad52b5a7dfc1734b30ef968d75b86853d3acce1d42a9b18ec48bbdc838b8306cdf58b83bed929740b008392474ee2231db18634150c2db58c793870971469bc44fe011fcfc30f3ace540944e583e255992d2d36482613d56fc9ea22c6bf58bb2c1399e1f889a470201b3f24f37e6ffda676007239d7f7bfc974226a79b426913648e7268fdaa38b87c5b3202c234a525db7bad7abb9b690661dbdaabfab77a8e9ec5a3ff8ec48fa8cb82bd0c5a810628c5d759ac979333d6166c4a1ae73cb8444eea81cd4005e0cb012a62c9edf6f5a6cd6afee05e066156633c74bf6f5ee6ae32989fb381416954a767fa948b889785e48e559727475537bfdf0314e6c3124463d4290125a06fa22519ce6f4e5051d27a9d7a478b8d302a7fe48257f3fea7bf63a3d9c62c1ce7d5eb5dc3457304486e8e0bf8f3ff6022e8e2a1b532f8cb760a93eb5cce84136996401f98fd7b7698afcb5893a2f8456ef1de4d0872dfddc78fb6a05729dc71c3bc7090b40b56119375440d559272be400ea9fafbf6073e3fda01cde6c32e0f772821b51ba648ec58fb7c8c04a400346d8df09f66835d3aa6777460893b0639fb872551017413734827561bc2216eefb6dc75a46dbc7f10e08421c2a69a2c4312a599c55cc982cdfa324e8da122184c5fcb92df6a319d3432e8336066f4e9abb7227cf5eccfa43df4397c0d34e45d854bdeedb842517104509d0ddcce902bf92226bef90bbfa35b5104bb9b5747a7f43e96bb6719b64119f2ad8f686932ee5c0747518ba28c2cd2d1502f382c06b3a41a95f4dc88e940438a5d1525aa23e0c83402d730328e61b49d7db463e46577dc68ea5b857af025e96a460180ff72646b919fe075da7e2b48319a3b85bd99d38e0088472e59edc4867e73cdfd4842250afff116e31f6fe5296f1af3650f368609673fbba8bf8dece3b1a7dc8d8800d4f3e053cd84eebec18393394a48c50c9d4490f725c77e6d6a9e250a60f43b4abbb5f1b78f67f4a4a27fea48e429e6441aa83fa9e7bf6cf80bebe05fc0c0f59fcc5004dc27c4e12d65435a0d64e1db219052b218", 0x1000) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @remote}, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x6, 0x40100) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000140)=0x100000010000) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0xfffffffffffffffd, 'Sr\xf7\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe8\x00'}, 0x18) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_dccp_buf(r1, 0x21, 0x8e, &(0x7f0000000300)="c49dd2772d1575678865245ed038920913f2fc5ca09fee3c68974d87bf3fc01d3006ad37bfbf188e49c83850b36a84c54b11ea138103e9ceebae471df9c1fdef701472d7c96feb6abcd16a36fff4e1da45195273f80152dd640a05e77f8e042af5c84177bce4e37cc88b009496118463cdce7dd207943e154beab6ba63ece60b74ccf10cf50c7ec6f048a347f3e192cc15183b5b3402055033944af0a0a85e54a63b0385927c006f3081", 0xaa) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000240)={0x3, {{0x2, 0x4e22, @multicast2}}}, 0x88) 15:30:06 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x30) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000080)=0x3) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:30:06 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$CAPI_GET_SERIAL(r2, 0xc0044308, &(0x7f0000000040)=0x25da) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x5, "23a06b3ea5"}, &(0x7f0000000100)=0xd) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000740)={r3, 0x1000, "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"}, &(0x7f0000000140)=0x1008) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 2106.519230] misc userio: Invalid payload size 15:30:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0xffffffffffffff3e) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1c, @local}, 0xffffffffffffff34) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x46040, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f00000000c0)=""/90) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=""/239, 0xef) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:30:06 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:06 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f0000000040)={0xffffffffffffffff}, 0x0, {0xa, 0x4e24, 0x10001, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10000}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x1e3, 0xfa00, {&(0x7f00000001c0), r3}}, 0x18) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000140)=""/85) fcntl$getown(r0, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x6) 15:30:06 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x700, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f00006bcff0)={&(0x7f0000000000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x4001}}]}, 0x2c}}, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:30:06 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04effdfb08000001000000000000"], 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r1 = dup2(r0, r0) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:06 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f0000d4effc)=0x1, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000100)={0x400, 0x7fffffff, 0x7, {}, 0x400, 0x5}) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:30:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000040)={0x8, {0x8, 0x1, 0x6, 0x7}}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="af", 0x87ed8626c22312f0, 0x10020000000, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:30:06 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3300000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2106.750119] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 2106.762205] misc userio: Invalid payload size 15:30:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x3, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x1, 0x0, 0x100000000000000, 0x400000000000, 0xffffffff, {0x0, @in6={{0xa, 0x4e23, 0x1, @remote, 0x2}}, 0x7, 0xfff, 0x3, 0x7f, 0x200}}, &(0x7f0000000180)=0xb0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r2, 0x1c, 0x57}, 0xc) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) [ 2106.839561] netlink: 'syz-executor.1': attribute type 21 has an invalid length. 15:30:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)=""/155, 0x9b}, {&(0x7f0000000100)=""/242, 0xf2}, {&(0x7f0000000240)=""/149, 0x95}, {&(0x7f0000000300)=""/138, 0x8a}, {&(0x7f00000003c0)=""/186, 0xba}], 0x5, &(0x7f0000000500)=""/4096, 0x1000}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000001500)=""/29, 0x1d}, {&(0x7f0000001540)=""/123, 0x7b}, {&(0x7f00000015c0)=""/88, 0x58}, {&(0x7f0000001640)=""/203, 0xcb}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/212, 0xd4}], 0x6, &(0x7f00000028c0)=""/62, 0x3e}, 0x2}, {{&(0x7f0000002900)=@nfc_llcp, 0x80, &(0x7f0000003e00)=[{&(0x7f0000002980)=""/151, 0x97}, {&(0x7f0000002a40)=""/165, 0xa5}, {&(0x7f0000002b00)=""/84, 0x54}, {&(0x7f0000002b80)=""/143, 0x8f}, {&(0x7f0000002c40)=""/206, 0xce}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000003d40)=""/23, 0x17}, {&(0x7f0000003d80)=""/78, 0x4e}], 0x8, &(0x7f0000003e80)=""/244, 0xf4}, 0x3}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000003f80)=""/174, 0xae}, {&(0x7f0000004040)=""/165, 0xa5}, {&(0x7f0000004100)=""/118, 0x76}, {&(0x7f0000004180)=""/102, 0x66}], 0x4}, 0x4}, {{&(0x7f0000004240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000004540)=[{&(0x7f00000042c0)=""/91, 0x5b}, {&(0x7f0000004340)=""/193, 0xc1}, {&(0x7f0000004440)=""/160, 0xa0}, {&(0x7f0000004500)=""/18, 0x12}], 0x4, &(0x7f0000004580)=""/84, 0x54}}, {{&(0x7f0000004600)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000005ac0)=[{&(0x7f0000004680)=""/224, 0xe0}, {&(0x7f0000004780)=""/255, 0xff}, {&(0x7f0000004880)=""/252, 0xfc}, {&(0x7f0000004980)=""/132, 0x84}, {&(0x7f0000004a40)=""/4096, 0x1000}, {&(0x7f0000005a40)=""/116, 0x74}], 0x6}, 0x400}, {{&(0x7f0000005b40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000005bc0)=""/246, 0xf6}], 0x1, &(0x7f0000005d00)=""/219, 0xdb}, 0x40}, {{&(0x7f0000005e00)=@l2, 0x80, &(0x7f0000006400)=[{&(0x7f0000005e80)=""/77, 0x4d}, {&(0x7f0000005f00)=""/219, 0xdb}, {&(0x7f0000006000)=""/41, 0x29}, {&(0x7f0000006040)=""/221, 0xdd}, {&(0x7f0000006140)=""/197, 0xc5}, {&(0x7f0000006240)=""/18, 0x12}, {&(0x7f0000006280)=""/64, 0x40}, {&(0x7f00000062c0)=""/108, 0x6c}, {&(0x7f0000006340)=""/133, 0x85}], 0x9}, 0x1}, {{0x0, 0x0, &(0x7f00000068c0)=[{&(0x7f00000064c0)=""/158, 0x9e}, {&(0x7f0000006580)=""/113, 0x71}, {&(0x7f0000006600)=""/17, 0x11}, {&(0x7f0000006640)=""/223, 0xdf}, {&(0x7f0000006740)=""/250, 0xfa}, {&(0x7f0000006840)=""/110, 0x6e}], 0x6}, 0x5}], 0x9, 0x20, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000006b80)='/dev/ubi_ctrl\x00', 0x244001, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000006bc0)) [ 2106.891971] misc userio: Invalid payload size 15:30:06 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:07 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) setfsuid(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:30:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='loginuid\x00') r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x294, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x60, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @local, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7}}}}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa398}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_MEDIA={0x168, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2210}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe47}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xae2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2a5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2c5b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ea}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffff8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x4}, 0x20048881) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:30:07 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:07 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0xfffffffffffffe71) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:30:07 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r3) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r4, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = getpid() perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x1620, 0x0, 0x2bf3, 0x681d8d4a, 0x0, 0x653, 0x800, 0x8, 0x1ff, 0x8, 0x3, 0x6, 0x0, 0x4, 0x481, 0xbb, 0xffffffffffff8001, 0x4, 0x200, 0x3ff, 0x3, 0x400000, 0x5b, 0x7ff, 0x9, 0x5, 0x0, 0x4, 0x1, 0x8f, 0x1, 0x9, 0x100000001, 0x80, 0x1800000000, 0x5, 0x0, 0xd261, 0x4, @perf_config_ext={0x0, 0x200000000}, 0x4280, 0x8001, 0x1f, 0x0, 0x2, 0x10000, 0xc0d6}, r6, 0x4, r2, 0xa) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x3) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:30:07 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:30:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0xffffffffffffff47, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:30:07 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x5800000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:07 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x404000, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 2107.676273] misc userio: Invalid payload size 15:30:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) 15:30:07 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:07 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000bc1fc99f000000000000000082e77b4b8edb412eb695064fde9bc2677b3a4c8eb198828f3fa35cb6aab19751646751185e825b585285e5a8551cf7a794a3588d91efb052b36b16e4dc237a92512d5b70302b4a900f8d02a3987f2a10eb14848a4b7b75ed717da90b727e7804b832226ac2a289da2af062e64633281f7281a985515653159492660ec1ecf7957e75d45d833f27c7115757fea4e817cc09d5bce3e9d010e88a80d88e2092ea82dc1d6d3a6ca20f730c004614243fda7568d182b94c5e1f49ded89249557dfb04ada83298d81ded75269282b2980abd984e73b939d0fffda197ddeda5acb32f93de667deedf846c3a794940ca94"], 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x4000, 0x0) [ 2107.743327] misc userio: Invalid payload size 15:30:07 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:07 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x100080, 0x4) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:30:07 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="00000000cc955e093c1ae7f0440a7f39ce37b30f41c4a9176641a845d34ac3095a37cdee031150f54726", @ANYRES16=0x0, @ANYBLOB="000028bd7000ffdbdf2508000000"], 0x14}}, 0x0) r0 = memfd_create(&(0x7f0000000140)='bdev:\x00', 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xd020020}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x8c, r4, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xa000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5629}, @NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8, 0x1, r1}, {0x8, 0x1, r3}, {0x8, 0x1, r1}, {0x8, 0x1, r3}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) [ 2107.949614] misc userio: Invalid payload size [ 2108.030688] misc userio: Invalid payload size 15:30:08 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:08 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x420100, 0x8) r1 = getpgrp(0xffffffffffffffff) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x80000000, 0x1, 0x9}) io_setup(0x6, &(0x7f0000000100)) fcntl$lock(r0, 0x24, &(0x7f0000000080)={0x0, 0x3, 0xc78, 0x3, r1}) ioctl$FICLONE(r0, 0x40049409, r0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x1a, "298180e8ab689917c8b291d595d97cf315df67964888cde4eef2"}, &(0x7f0000000240)=0x3e) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:30:08 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="00000002", @ANYRES16=0x0, @ANYBLOB="000008bd0000c0e2d1665f66a9e830d3c75d2a552ab9ca150a1d4510612cd7b9399f3fa92b739ff3100100000000000000000000000000766997fafc81e6ff353cfb885ebafe6e6f96d0050031a4e36d634a986faa3e4dbb5198701458"], 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000100)={0xfff, 0x7, 0x7fffffff, 'queue1\x00', 0xffffffff}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:08 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm_plock\x00', 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r2, 0x1f}, 0x8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000180)=""/61, &(0x7f0000000240)=0x3d) 15:30:08 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000100)={{0x2e, @multicast1, 0x4e20, 0x3, 'dh\x00', 0x3d, 0x6, 0x6a}, {@broadcast, 0x4e20, 0x2000, 0x6, 0x3, 0x4}}, 0x44) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:30:08 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000008800)=[{{&(0x7f00000000c0)=@un=@abs, 0x80, &(0x7f0000000040)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000140)=""/83, 0x53}, 0x10000}, {{&(0x7f0000000240)=@nl, 0x80, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/54, 0x36}, {&(0x7f00000002c0)=""/103, 0x67}, {&(0x7f0000000340)=""/177, 0xb1}], 0x3, &(0x7f0000001480)=""/47, 0x2f}, 0x7ff}, {{&(0x7f00000014c0)=@un=@abs, 0x80, &(0x7f0000002940)=[{&(0x7f0000001540)=""/39, 0x27}, {&(0x7f0000001580)}, {&(0x7f00000015c0)=""/90, 0x5a}, {&(0x7f0000001640)=""/14, 0xe}, {&(0x7f0000001680)=""/78, 0x4e}, {&(0x7f0000001700)=""/236, 0xec}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/163, 0xa3}, {&(0x7f00000028c0)=""/62, 0x3e}, {&(0x7f0000002900)=""/20, 0x14}], 0xa, &(0x7f0000002a00)=""/118, 0x76}, 0x3}, {{&(0x7f0000002a80)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002b00)=""/168, 0xa8}, {&(0x7f0000002bc0)=""/187, 0xbb}, {&(0x7f0000002c80)=""/133, 0x85}, {&(0x7f0000002d40)=""/200, 0xc8}, {&(0x7f0000002e40)=""/22, 0x16}, {&(0x7f0000002e80)=""/179, 0xb3}, {&(0x7f0000002f40)=""/131, 0x83}, {&(0x7f0000003000)=""/149, 0x95}], 0x8, &(0x7f0000003140)=""/166, 0xa6}, 0x74}, {{&(0x7f0000003200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000006480)=[{&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000004280)=""/4096, 0x1000}, {&(0x7f0000005280)=""/151, 0x97}, {&(0x7f0000005340)=""/52, 0x34}, {&(0x7f0000005380)=""/175, 0xaf}, {&(0x7f0000005440)=""/31, 0x1f}, {&(0x7f0000005480)=""/4096, 0x1000}], 0x7, &(0x7f0000006500)=""/4096, 0x1000}, 0x10000}, {{&(0x7f0000007500)=@sco, 0x80, &(0x7f0000007700)=[{&(0x7f0000007580)=""/15, 0xf}, {&(0x7f00000075c0)=""/66, 0x42}, {&(0x7f0000007640)=""/180, 0xb4}], 0x3, &(0x7f0000007740)=""/95, 0x5f}, 0x7f}, {{0x0, 0x0, &(0x7f00000087c0)=[{&(0x7f00000077c0)=""/4096, 0x1000}], 0x1}, 0x2}], 0x7, 0x20, &(0x7f0000008a00)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000008fc0)='./file0\x00', 0x400800, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000008a80)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000a8040000800200000000000080020000c0030000c0030000c003000004000000", @ANYPTR=&(0x7f0000008a40)=ANY=[@ANYBLOB="0000000000000000000000000004000000000000000000005a330000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="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"], 0x4f8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) syz_open_dev$radio(&(0x7f0000008f80)='/dev/radio#\x00', 0x0, 0x2) sendto$inet(r2, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000089c0)={0x0, r1, 0x2, 0x7, 0x5, 0x5}) [ 2108.558847] misc userio: Invalid payload size 15:30:08 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:30:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r2 = shmget(0x0, 0x4000, 0x58, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) sysfs$2(0x2, 0x8, &(0x7f0000000080)=""/65) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000100)={0x0, @speck128}) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) [ 2108.637736] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20000 [ 2108.675334] misc userio: Invalid payload size 15:30:08 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2108.733203] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20000 15:30:08 executing program 3: bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000440)="af", 0xfffffffffffffe36, 0xfffffffffffffffc, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="5f15039b7bee559eff80c1", 0xb, 0x4, 0x0, 0x0) 15:30:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x100000004e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0xb95, 0x4) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) signalfd(r0, &(0x7f0000000040), 0x8) 15:30:08 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000240)={{0xffffffffffffffff, 0x0, 0x5, 0x3, 0x1}, 0xfff, 0xb5c, 'id1\x00', 'timer0\x00', 0x0, 0x6, 0x101, 0x1, 0x4}) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) r4 = semget$private(0x0, 0x0, 0x100) semctl$IPC_INFO(r4, 0x1, 0x3, &(0x7f0000000480)=""/151) socket$inet(0x2, 0x2, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:30:08 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2108.908797] misc userio: Invalid payload size [ 2109.049162] misc userio: Invalid payload size 15:30:09 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="bc49acc9", @ANYRES16=0x0, @ANYBLOB="000028bd7000ffdbdf2508000000"], 0x14}}, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000100)={0x1, 0x6, 0x7ff}) r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x3, 0x10000) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x20000000, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) [ 2109.235892] Unknown ioctl -1068739767 [ 2109.242344] Unknown ioctl -1068739767 15:30:09 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x1, 0x4) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:30:09 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x10041) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)={0x2, r1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:30:09 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:09 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x1, 0x40000) write$P9_ROPEN(r1, &(0x7f0000000300)={0x18, 0x71, 0x2, {{0x2, 0x0, 0x3}, 0x6}}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r3, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x8, 0x6, 0x646e, 0x1, 0x36}, &(0x7f0000000040)=0x98) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) sendmsg$key(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)={0x2, 0xc, 0x4, 0x0, 0x2b, 0x0, 0x70bd29, 0x25dfdbfe, [@sadb_ident={0x2, 0xb, 0x80000001, 0x0, 0xba8}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e20}, @sadb_x_policy={0x8, 0x12, 0x4, 0x1, 0x0, 0x6e6bb6, 0x3, {0x6, 0x32, 0x5d8, 0xffffffffffffffff, 0x0, 0x1f, 0x0, @in=@loopback, @in=@remote}}, @sadb_ident={0x2, 0xa, 0x1000, 0x0, 0x7ff}, @sadb_x_sa2={0x2, 0x13, 0xac, 0x0, 0x0, 0x70bd2d, 0x3501}, @sadb_key={0x8, 0x9, 0x188, 0x0, "2892112bcab74ca0e464cf3b7ed3ebbb6756837fd9eeec1201ac3367d4de6f25468d66d2e96871d02078b4cbfa0e1c0f8d"}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x9, {0x6, 0xff, 0x6, 0x7f, 0x0, 0x9, 0x0, @in=@multicast2, @in6=@rand_addr="160a32fd3895ba81f4a33dd1963e723f"}}, @sadb_ident={0x2, 0xa, 0x3, 0x0, 0x80}, @sadb_x_policy={0x8, 0x12, 0x4, 0x1, 0x0, 0x6e6bb8, 0x3, {0x6, 0xff, 0x4, 0x2, 0x0, 0xfb, 0x0, @in=@remote, @in=@broadcast}}]}, 0x158}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:30:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e22, @empty}, 0x10) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) prctl$PR_SVE_SET_VL(0x32, 0x5e9e) getsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f00000000c0)=""/17, &(0x7f0000000100)=0x11) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x18000, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000300)) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-control\x00', 0x143000, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f00000002c0)) select(0x40, &(0x7f0000000140)={0x3ff, 0x1, 0x799f, 0xfff, 0x101, 0x9, 0x2, 0xffffffffffff8001}, &(0x7f0000000180)={0x6, 0x400, 0x6, 0x3, 0x3, 0x9, 0x2e, 0x8}, &(0x7f00000001c0)={0x7, 0x7, 0x80000001, 0x8, 0x2, 0x40, 0xba, 0x7f}, &(0x7f0000000240)={0x77359400}) 15:30:09 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x40c00) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 2109.507056] misc userio: Invalid payload size 15:30:09 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:09 executing program 3: bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x400, 0x0) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000000480)) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x4000, 0x0) sendto$inet(r1, &(0x7f0000000440)='\x00', 0xbf, 0x1, 0x0, 0xffe3) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:30:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:30:09 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000032e207fcc1f70990", @ANYRES16=0x0, @ANYBLOB="000028bd7000ffdbdf2508000000"], 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = dup2(r0, r0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x20) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 2109.656407] misc userio: Invalid payload size 15:30:09 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="14002419", @ANYRES16=0x0, @ANYBLOB="000028bd7000ffdbdf2508000000"], 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) 15:30:10 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(r1, 0x9) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x20e, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20004015) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:30:10 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2409000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb0, r2, 0xb00, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x983}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x48, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:30:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f0000000140)=0x1e) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x7d) sendto$inet(r0, &(0x7f0000000440)="af", 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000240)="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") sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) prctl$PR_SET_FPEMU(0xa, 0x3) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f00000001c0)={0x7, 0x4, 0x7ff}) 15:30:10 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x612000, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x28}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000240)={r3, 0x4241aca9}, &(0x7f0000000280)=0x8) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r4, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) memfd_create(&(0x7f00000002c0)='+\x00', 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:30:10 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="00000100", @ANYRES16=0x0, @ANYBLOB="000028bd7000ffdbdf2508000000"], 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x6, 0x0, 'queue1\x00', 0x8001}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 2110.382025] misc userio: Invalid payload size 15:30:10 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:10 executing program 5: modify_ldt$write(0x1, &(0x7f0000000040)={0x8000, 0x1000, 0x400, 0x0, 0x403, 0x7, 0x9, 0x2, 0x8e9d, 0x1ff}, 0x10) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x2, 0x4000) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:10 executing program 1: bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x376) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x58) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:30:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x108) r3 = dup2(r1, r2) open$dir(&(0x7f0000000180)='./file0\x00', 0x80000841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000280)=[0x0, 0x0], 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000006740)={0x0}}, 0x0) [ 2110.527529] misc userio: Invalid payload size 15:30:10 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e23, 0x301, @rand_addr="370c0a79674e96a49f4a3266c7c0d6b2", 0x7}, {0xa, 0x4e23, 0x8000, @rand_addr="94a53a231d218fded1e6fbc0b0bf9f2c", 0x7ff}, 0xffffffff80000001, [0xf489, 0x3, 0x7ff, 0x9, 0x1, 0x80000000, 0x8, 0x8]}, 0x5c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000180)=""/144, &(0x7f0000000240)=0x90) 15:30:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x1, 0x80000) r2 = getpgid(0x0) write$cgroup_pid(r1, &(0x7f0000000080)=r2, 0x12) 15:30:11 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000940)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000980)={'ip6gretap0\x00', r1}) 15:30:11 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000040)="193fd40d31b525a10cabdf301d27b5ac43cd118a6d35506eab96d3a19c6a4c0bad948e22bca0d4ed9f60d32e29a0091de11705d30cb4093687", 0x39, 0x20000000, &(0x7f0000000080)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 15:30:11 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x220400, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f0000000280)=0xe8) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',max_read=0x000000000000001f,allow_other,default_permissions,rootcontext=staff_u,smackfsdef=^+,uid>', @ANYRESDEC=r3, @ANYBLOB="2c6d7572652c7065af5d5ac07205618373b17a726d6974"]) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/userio\x00', 0x22000, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r6, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r7, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r7, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r6, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r4, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, 0x0, 0x7af) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) 15:30:11 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x11, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x101, 0x9, 0x100000001}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000001c0)={r3, 0xfffffffffffffffc, 0x7f}, 0x8) timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x41) write$binfmt_misc(r4, &(0x7f00000008c0)=ANY=[@ANYBLOB='c'], 0x1) ioctl$int_in(r4, 0x80000000005001, 0x0) r5 = gettid() tkill(r5, 0x1000000000016) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x2000}, {}, @connect}], 0x30) 15:30:11 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r0, 0x80000001) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x0, 0x4}, 0xc) 15:30:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0xb8}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:30:11 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20ncci\x00', 0x80080, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000380), 0x4) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000003c0)={0x1, r1}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x103000, 0x0) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="aa0000007d0200000084003f00010000002000000000050000000000000000000400030000000200000081000000000000001e00766265543023657468316c6f76626f786e6574316367726f75702711002f6465762f646c6d2d636f6e74726f6c0001002f2100776c616e316367726f75706370757365812d6d696d655f74797065776c6c6d2d636f6e74726f6c00000000000000000000000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5], 0xaa) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000400)) connect$l2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @multicast2}, 0x0, 0x1, 0x3, 0x2}}, 0x2e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:30:11 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) socket$inet(0x2, 0x800, 0x10001) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:30:11 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x40, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000080)=0x60, 0x8) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) [ 2111.550092] misc userio: Invalid payload size [ 2111.647617] misc userio: Invalid payload size 15:30:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f00000023c0)=""/49, 0x31}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x1, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 15:30:12 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:12 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000001c0)={0x0, 0x1bc8f2e3, 0x3}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) read$alg(r0, &(0x7f0000000240)=""/204, 0xcc) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x2, 0x244000) getsockopt$inet6_tcp_buf(r2, 0x6, 0x2d, &(0x7f0000000080)=""/98, &(0x7f0000000100)=0xffffffffffffffa8) 15:30:12 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) dup(r0) 15:30:12 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0xb5, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x3c7}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x20000000) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = socket$bt_bnep(0x1f, 0x3, 0x4) r3 = syz_open_dev$mice(&(0x7f00000004c0)='/dev/input/mice\x00', 0x0, 0x100) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40405515, &(0x7f0000000500)={0x3, 0x5, 0x178, 0x54aa, 'syz1\x00', 0x7f}) r4 = accept(r2, &(0x7f00000001c0)=@ax25={{0x3, @default}, [@netrom, @netrom, @rose, @rose, @default, @null, @rose, @default]}, &(0x7f0000000240)=0x80) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x20, 0x2, [0x4, 0x0]}, &(0x7f0000000400)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000440)={r5, 0x5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x6800000000000000, 0x1000000}, [@map={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x10}]}, 0x0, 0x6, 0x90, &(0x7f00000000c0)=""/144}, 0x48) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="4bbb74790258f41a26908f9253ddbe932b5f", 0x12}, {&(0x7f0000000080)="98933b15fbe26af967a57aad947ebc", 0xf}], 0x2, &(0x7f0000000740)=[{0x28, 0x1ff, 0x7fff, "968f5a09ce4c882aa877e96eecde39de1388054ef1"}, {0x80, 0x10a, 0x2b, "989db91611fdfe36286319e173d00f5ba30c4060267417b1b4f5440c9f10871f2882f73fde8f270e400308dfc3a4ca6406e424910355cf51912667936c177ca9ee1c12564582bf0f1ebb2a2d7d8a1715c6e4b4dbb02a6a1400f26bc38284d53e3615543bf7ae022b510e2ef2635384"}, {0x38, 0x11f, 0x10001, "4e0d5fa640d15b4570899c77139779c4b9f70da6f5a73a19ddc27f483829dc3b4e3105d73f"}, {0x38, 0x13b, 0x4, "ffd445b8486461dd623993b8aa3005af11e1184e61b0d85f15eca757ae8179aca98ea2"}, {0x1010, 0x89, 0x0, "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"}, {0x48, 0x115, 0x9, "5b26db85b1203ff4d2da3e87729d4e01a37433e10e1ee5569b44864d4e88bbab9f14c8dc877af963925e4f9262229a458c4e05b24372a5"}], 0x1170}, 0x4) r6 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000480)=0x5, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x80000001, 0x0, 0x0, @tick, {}, {}, @connect}], 0x30) 15:30:12 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xe) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) 15:30:12 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3300], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:12 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb}) 15:30:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x10001}, 0x10) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:30:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0xe20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:30:12 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r0, 0x80000001) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x0, 0x4}, 0xc) 15:30:12 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:12 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x612000, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x28}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000240)={r3, 0x4241aca9}, &(0x7f0000000280)=0x8) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r4, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) memfd_create(&(0x7f00000002c0)='+\x00', 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:30:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0xfffffffffffffcf9) 15:30:12 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) getsockopt$inet6_dccp_buf(r2, 0x21, 0xc, &(0x7f0000000040)=""/30, &(0x7f0000000080)=0x1e) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 2112.699905] misc userio: Invalid payload size 15:30:13 executing program 2: r0 = socket$inet6(0xa, 0x800000100000002, 0x0) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}, {{&(0x7f00000009c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x15, 0x0}}], 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendto$inet(r2, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000040)) sendto$inet(r2, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:30:13 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:13 executing program 5: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, r0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:13 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000240)={{0xffffffffffffffff, 0x0, 0x5, 0x3, 0x1}, 0xfff, 0xb5c, 'id1\x00', 'timer0\x00', 0x0, 0x6, 0x101, 0x1, 0x4}) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) r4 = semget$private(0x0, 0x0, 0x100) semctl$IPC_INFO(r4, 0x1, 0x3, &(0x7f0000000480)=""/151) socket$inet(0x2, 0x2, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:30:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:30:13 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000240)={{0xffffffffffffffff, 0x0, 0x5, 0x3, 0x1}, 0xfff, 0xb5c, 'id1\x00', 'timer0\x00', 0x0, 0x6, 0x101, 0x1, 0x4}) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) r4 = semget$private(0x0, 0x0, 0x100) semctl$IPC_INFO(r4, 0x1, 0x3, &(0x7f0000000480)=""/151) socket$inet(0x2, 0x2, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) [ 2113.091100] misc userio: Invalid payload size [ 2113.096065] misc userio: Invalid payload size 15:30:13 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5800], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000080)=0x8) 15:30:13 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xc002, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000240)={0x0, @bt={0x80000000, 0x82, 0x1, 0x0, 0x4d1, 0x4, 0x400, 0x1, 0x1ff, 0x10000, 0x8001, 0x3ff, 0x1000, 0x8001, 0x1e, 0x10}}) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r3, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0xff, 0x401) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:30:13 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:13 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2113.300932] misc userio: Invalid payload size 15:30:13 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0x30) 15:30:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x1f, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000240)={{0x3, @addr=0x1f}, "4c6875f9c9030ec9ab5f8142f7be2ad6ff72f2c8b018f6aa275e27a66b81d65b", 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000100)=0xc) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:30:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0xa) 15:30:13 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0xb6, "b3d4e39e4fa7615c9b3f0c81988339471aa672ef470633ee265525146915afda8f5701c982cf2e3c559be6f5ca7e848e2ea3d7ab0244b0290de0bccd9a0b3f936e4191d562e2309dfa084ed807e7ab183fcc0a03f0a04e7262c1d532bbd8d4149ce6598c6c5f1e632cc3a722f2a8527c45c3bbcfe2e22b7bee3cb2ea4378db600111f3d57d68320c51067c32f45c9d9a1fdddc59166c3fa688bffaca76415c426c26c5a16a8534f93cf3b7dd7f5353d00173f2a4f9b0"}, &(0x7f0000000040)=0xbe) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={r3, 0x100}, &(0x7f0000000140)=0x8) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:30:13 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000100)={0x7, 0x7fffffff}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) modify_ldt$read_default(0x2, &(0x7f0000000240)=""/157, 0x9d) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3a, &(0x7f0000000140)=0x401, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000300)={0x0, r3, 0x1, 0xaa27, 0x401, 0x2}) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(r2, 0x5420, 0x0) close(r0) 15:30:13 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:13 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x10000000, 0x0, 0x83c283ecd, @tick, {}, {}, @connect}], 0x30) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x100000000, 0x20000) 15:30:14 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2114.016496] misc userio: Invalid payload size [ 2114.023051] misc userio: Invalid payload size 15:30:14 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x101040) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000080)=[0x4, 0x4], 0x2) r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xffff, 0x80000) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'ipddp0\x00', 0xfff}) 15:30:14 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000100)={0x7, 0x7fffffff}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) modify_ldt$read_default(0x2, &(0x7f0000000240)=""/157, 0x9d) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000040)=r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3a, &(0x7f0000000140)=0x401, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000300)={0x0, r3, 0x1, 0xaa27, 0x401, 0x2}) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(r2, 0x5420, 0x0) close(r0) 15:30:14 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000240)="085e2a9707979dd304080000000000008dd2c15d238c01b6070000001000e9aac0c8a89c44ce48742f6aecfd45e8da17680d0b7a6b61223f452369cd34a79b5df8072079aff09b6691dc6d8ba81c129f4158e47999ff1d84f097db08b3485ad09ceded648a60b7ac3b82b051633e011bcc58a0baa5bad4a350e26176dc5112215b5160c377eb416df23e7a5b907bcdb2d2db84806349a4fa07b249f8b1db7d59ce1fd3e21f9a9678c8d0") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x194) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000140), 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000100)) write$USERIO_CMD_SEND_INTERRUPT(r3, 0x0, 0xfffffffffffffd53) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) 15:30:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) pkey_alloc(0x0, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@remote, @rand_addr=0x2, @multicast2}, 0xc) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={r1, r2, 0xb, 0x1}, 0x10) [ 2114.261797] misc userio: Invalid payload size [ 2114.273761] misc userio: Invalid payload size 15:30:14 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000040)=0xfffffffffffffffc) 15:30:14 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fsetxattr$security_smack_transmute(r0, &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x1) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e1e, @remote}, 0x10) ioctl$sock_ifreq(r0, 0x89df, &(0x7f0000000080)={'bcsh0\x00', @ifru_data=&(0x7f0000000040)="b6f0c4ceca6733ac87bbdcd3294abe555338956e27a1598e858fb76628eb71ba"}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 15:30:14 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="10360000", @ANYRES16=0x0, @ANYBLOB="000028bd7000ffdbdf2508000000"], 0x14}}, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r1 = dup2(r0, 0xffffffffffffffff) getuid() ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) setns(r1, 0x40000000) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 15:30:14 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0x290, &(0x7f0000000040)={@broadcast, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xf402, 0x0, @remote={0xac, 0x1c}, @local}, @igmp={0x12, 0x0, 0x0, @broadcast}}}}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='vca\x850\x00\x00\x006\x00', 0xf7) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x100, 0x100, 0x100, 0x0, 0x100, 0x200, 0x200, 0x200, 0x200, 0x200, 0x3, &(0x7f0000000040), {[{{@ip={@multicast1, @local, 0xffffff00, 0x0, 'bcsf0\x00', 'ip_vti0\x00', {}, {}, 0x7f, 0x3, 0x40}, 0x0, 0x98, 0x100}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x80000000, 0x2, 0x101, 'snmp_trap\x00', 'syz0\x00', 0x8000000000000000}}}, {{@uncond, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0x0, 0x0, 0x3, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7fff, 0x16, 0xfffffffffffffff8, 0x81, 0x341, 0x35, 0x5, 0x4]}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000100)='syz1\x00') sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000d40)={{{@in6=@initdev, @in=@multicast1}}, {{@in6=@loopback}}}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x3) write$binfmt_script(r2, &(0x7f0000000900)=ANY=[@ANYBLOB="2321202e2f66696c6530202357994f66e76f4d"], 0x13) close(r2) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:30:14 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x8, 0x7, 0xa7, &(0x7f0000ffd000/0x2000)=nil, 0x1000}) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) [ 2114.966560] misc userio: Invalid payload size 15:30:15 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:15 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000040)=0x9) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x100) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e22, @broadcast}, 0xfffffffffffffcc8) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000240)="59e305eab2ac05d6af6bf605d2a0acec6fabb7e4ddd54743eaf6dab1bd0a0fc8bb893dc08f8b9ec97b585690af81155b77eab6b6e7ab503d0a2392f2d2552ea7e2584685ec62f6208e7770cd706aa40a456c6c45f3a1b86d", 0x58) setsockopt$inet6_dccp_buf(r2, 0x21, 0x8f, &(0x7f0000000100)="f78c1728059c49ed9451db484ba9577fcc4293a1da92bc2b9d4f32313cf29366bd2674a6e0bbce516a2bbf52caa938babe32a1d81d086cb37bb7519315b71705f6a538fc0f2c05b7b9f1ac63af4518ef009e3d4c8a2fb01baf6e651100ddf1427943c0f767067bc453cde1e1", 0x6c) 15:30:15 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000100)={0x0, 0x3, {0x3, 0x0, 0x6, 0x1, 0xd2e}}) r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) recvfrom$unix(r0, &(0x7f0000000400)=""/212, 0xd4, 0x0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) 15:30:15 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x400a04, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="085e419207979e0b9a1717502f835ad712397d0eb2030000100000006c19a92c8cb571be5459a4f24aaa583ec0fcf7e69ff25e5a00f25a1aaadb791aa1c9651f3065c125225409bd14bfca64d230b8fe61dd27b076ee92cfa8069fb1ad6ccecaf22b7e5a2662db1a1bcd9f1bfd41688263") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e90, 0x82000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0x2) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040)) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000da9000)={0x2, 0x3, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) write$P9_RREADDIR(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x103) ioctl$KDSKBLED(r3, 0x4b65, 0x4) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x7af) 15:30:15 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000005c0)="085e419207979dd30408000000000000003cd7c2238cb57164398ef9950ce9aac0c8a89c44") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x193) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x2dc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f0000000600)) sendto$inet(r5, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) ioctl$UI_SET_MSCBIT(r4, 0x40045568, 0x2c) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0xffffffffffffffa2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x100, 0x7, 0x0, 0x0, 0xffffffff00000001, 0x1, 0x0, 0x4, 0x8, 0x61395c63, 0x93, 0x5b2d, 0x0, 0xfffffffffffffa3a, 0x8, 0xfffffffffffffffe, 0x3, 0x200, 0x7}) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, 0x0, 0x7af) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) close(r0) fcntl$setlease(r3, 0x400, 0x3ffffffff) 15:30:15 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2115.175819] misc userio: Invalid payload size [ 2115.194600] misc userio: Invalid payload size 15:30:15 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x4, [0x6380, 0x9, 0x800, 0x9b]}, &(0x7f0000000100)=0xc) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:30:15 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYRES64], 0x3}}, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x8000007fffffff, 0x200000) sendto$inet6(r0, &(0x7f0000000140)="f2dae0451afc8bf399311b3c92bee77240d3c26c483c9e7aef85e6d8d2a2c54c21adceb54cdcac3940c804414c646ed9530d83ed5c551ed8bf1b12f7ebcb174e7c00361e1ef34035f8368f418e28081b5ffdd317fc00bdedc9a2485a464aad5742f53453804e5afc2d3b0a23be0c67c2b6e64b4b5acc2924aec63be116e9132712d0fd76549ee67c5d4aa53e4d1b6223fa83b0fef9ea7ae28f237414fba88e0ea977d1de08094ce57444b8aa56f3e3c9a2024fbeebb80095244cde1d51de30094db2f7411c7b480f0c66937b2a0c7d2f9c434f58ab3f5ef5b5a44440207abada3b667cb58b", 0xe5, 0x20048000, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x3) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000480)={0x6e2, 0x55, 0xacb, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000400)={0x4, 0x8b, {0x57, 0x80000001, 0x80000001, {0x8}, {0x6, 0x9}, @cond=[{0x1000, 0x5, 0x2, 0x0, 0x7fff}, {0xfffffffffffffffc, 0x8, 0xfffffffffffffff7, 0x10001, 0x3f, 0x8}]}, {0x56, 0x1, 0xffffffff, {0x100000000, 0x20}, {0xfffffffffffffffa, 0x3f}, @const={0x80, {0xfff, 0x1, 0x51, 0x88a}}}}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:15 executing program 1 (fault-call:7 fault-nth:0): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x1) 15:30:15 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:15 executing program 3: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000600000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000040)={{0x9, 0x8}, 'port1\x00', 0x67, 0x400, 0xa4e, 0x0, 0x5, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x8}) 15:30:15 executing program 4: ftruncate(0xffffffffffffffff, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) sendto(r1, &(0x7f0000000340)="120000001200e7ef007b00005380a79a", 0x10, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000020c0), 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)=0x0) getpgrp(r2) r3 = syz_open_dev$radio(&(0x7f00000004c0)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000500)={0x2, 0x80000001}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000300)={0x19, 0x7, 0x2, {{0xc, '/dev/uinput\x00'}}}, 0x19) r5 = openat$cgroup_int(r4, &(0x7f0000000580)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x10000000000000ea) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f0000000040)) io_setup(0x3ff, &(0x7f0000000100)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0xc) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000380)={0x0, 0x0, [], {0x0, @bt={0x9, 0x0, 0x1, 0x3, 0x1f, 0x8, 0x7a, 0x2, 0xfffffffffffffc00, 0x0, 0x4, 0xffffffffffff0001, 0x5, 0x0, 0xa, 0x12}}}) capset(&(0x7f0000000140)={0x0, r7}, &(0x7f00000001c0)={0x6}) r8 = accept4$inet(r0, &(0x7f0000000240)={0x2, 0x0, @empty}, 0x0, 0x800) io_submit(r6, 0x0, &(0x7f00000002c0)) semget$private(0x0, 0x3, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) request_key(0x0, &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e20, 0x100, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x40}}}, &(0x7f0000000200)=0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r8, 0x84, 0xf, &(0x7f0000000680)={r9, @in={{0x2, 0x4e20, @multicast1}}, 0x10000, 0x1000, 0x75b99d96, 0x100000000, 0xb0}, &(0x7f0000000280)=0x98) [ 2115.870937] FAULT_INJECTION: forcing a failure. [ 2115.870937] name failslab, interval 1, probability 0, space 0, times 0 [ 2115.886570] CPU: 1 PID: 7753 Comm: syz-executor.1 Not tainted 5.0.0+ #8 [ 2115.893346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2115.902700] Call Trace: [ 2115.905300] dump_stack+0x172/0x1f0 [ 2115.908940] should_fail.cold+0xa/0x1b [ 2115.912846] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2115.917960] ? lock_downgrade+0x810/0x810 [ 2115.922122] ? ___might_sleep+0x163/0x280 [ 2115.926277] __should_failslab+0x121/0x190 [ 2115.930524] should_failslab+0x9/0x14 [ 2115.934331] kmem_cache_alloc_node+0x264/0x710 [ 2115.938936] ? rcu_read_lock_sched_held+0x110/0x130 [ 2115.943959] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2115.949558] ? inet_sk_state_store+0xb7/0x3b0 [ 2115.954078] __alloc_skb+0xd5/0x5e0 [ 2115.957721] ? skb_scrub_packet+0x440/0x440 [ 2115.962062] ? tcp_poll+0xc60/0xc60 [ 2115.965694] ? lock_sock_nested+0xe2/0x120 [ 2115.969936] ? __local_bh_enable_ip+0x15a/0x270 [ 2115.974618] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2115.979205] ? lock_sock_nested+0x9a/0x120 [ 2115.983452] tcp_send_fin+0x1f4/0xbb0 [ 2115.987275] tcp_shutdown+0x107/0x130 [ 2115.991080] ? tcp_set_state+0x7e0/0x7e0 [ 2115.995153] inet_shutdown+0x1bd/0x3d0 [ 2115.999052] __sys_shutdown+0x117/0x1d0 [ 2116.003040] ? __ia32_sys_getsockopt+0x150/0x150 [ 2116.007805] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2116.012573] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2116.017341] ? do_syscall_64+0x26/0x610 [ 2116.021324] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2116.026693] ? do_syscall_64+0x26/0x610 [ 2116.030676] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2116.035265] __x64_sys_shutdown+0x54/0x80 [ 2116.039424] do_syscall_64+0x103/0x610 [ 2116.043332] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2116.048523] RIP: 0033:0x457f29 [ 2116.051723] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 15:30:15 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_netdev_private(r1, 0x89f6, &(0x7f00000000c0)="c60dca90e079aa427440ff66cf8091178bde1778224c31f8659c1641e075f95eaccef69b6f2591a7c3dec9fd4734a9019e9fc5e28568018e666f4e547845b15075b43ed518c72365608039a8fdff38781d15e6169eeb49d6e3beb9815e8906dece81f14d1d90d6d7699603c47bf48c8934e9a29f7d896f18efaa77182a241612348df9b477c13b26d24757faea9bb7e381d43dc3cf308db5a71c44ce0782c5a6938f766b767b056329307ebd77ba29ad8433fef2e4b8dc1c7cf343845b7568") ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) read(r0, &(0x7f0000000200)=""/190, 0xbe) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETSF(r3, 0x5404, &(0x7f00000001c0)={0x9, 0x7, 0x81, 0xe6, 0x18, 0x0, 0x400, 0xcce6, 0x40, 0x3, 0x9, 0x2}) setpgid(r2, 0x0) 15:30:16 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:16 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x10000) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 2116.070630] RSP: 002b:00007f8af8992c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 2116.078343] RAX: ffffffffffffffda RBX: 00007f8af8992c90 RCX: 0000000000457f29 [ 2116.085610] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 2116.085619] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2116.085628] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8af89936d4 [ 2116.085636] R13: 00000000004c6228 R14: 00000000004db400 R15: 0000000000000004 15:30:16 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:16 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = fcntl$getown(r2, 0x9) write$P9_RGETLOCK(r2, &(0x7f0000000240)={0x45, 0x37, 0x1, {0x1, 0x6, 0xdc, r3, 0x27, 'selinuxmd5sumvmnet1)*%posix_acl_access('}}, 0x45) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000100)="9e54842bc24c4a1e2d9ce66b6aecb43e17d6cb5bb158fb621aa87e52251565ede81a97aca3d71f997f4384c603b8bfa9ff85dc3132387e0e7e4aece8c451130dde32522039b57a7ec826489f86890a89cba3557dcbd88510cb4e7c61fb3fc967eabe325f7a3bd88d18e943f5c9a769de558109e9b3da71a7186267c69c", 0x7d) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x7000000000, 0x8, 0x201, 0x5, 0x3, 0x48, 0x101, 0x97f2, 0x0}, &(0x7f0000000180)=0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000002c0)={r5, 0x5}, &(0x7f0000000300)=0xc) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(r4, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:30:16 executing program 1 (fault-call:7 fault-nth:1): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x1) 15:30:16 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:16 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) accept$unix(r2, &(0x7f0000000040)=@abs, &(0x7f0000000100)=0x6e) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:16 executing program 4: ftruncate(0xffffffffffffffff, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) sendto(r1, &(0x7f0000000340)="120000001200e7ef007b00005380a79a", 0x10, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000020c0), 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)=0x0) getpgrp(r2) r3 = syz_open_dev$radio(&(0x7f00000004c0)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000500)={0x2, 0x80000001}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000300)={0x19, 0x7, 0x2, {{0xc, '/dev/uinput\x00'}}}, 0x19) r5 = openat$cgroup_int(r4, &(0x7f0000000580)='memory.high\x00', 0x2, 0x0) writev(r5, &(0x7f0000000700), 0x10000000000000ea) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f0000000040)) io_setup(0x3ff, &(0x7f0000000100)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0xc) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000380)={0x0, 0x0, [], {0x0, @bt={0x9, 0x0, 0x1, 0x3, 0x1f, 0x8, 0x7a, 0x2, 0xfffffffffffffc00, 0x0, 0x4, 0xffffffffffff0001, 0x5, 0x0, 0xa, 0x12}}}) capset(&(0x7f0000000140)={0x0, r7}, &(0x7f00000001c0)={0x6}) r8 = accept4$inet(r0, &(0x7f0000000240)={0x2, 0x0, @empty}, 0x0, 0x800) io_submit(r6, 0x0, &(0x7f00000002c0)) semget$private(0x0, 0x3, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) request_key(0x0, &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e20, 0x100, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x40}}}, &(0x7f0000000200)=0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r8, 0x84, 0xf, &(0x7f0000000680)={r9, @in={{0x2, 0x4e20, @multicast1}}, 0x10000, 0x1000, 0x75b99d96, 0x100000000, 0xb0}, &(0x7f0000000280)=0x98) [ 2116.886089] FAULT_INJECTION: forcing a failure. [ 2116.886089] name failslab, interval 1, probability 0, space 0, times 0 [ 2116.956995] CPU: 0 PID: 7803 Comm: syz-executor.1 Not tainted 5.0.0+ #8 [ 2116.963781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2116.973139] Call Trace: [ 2116.975739] dump_stack+0x172/0x1f0 [ 2116.979385] should_fail.cold+0xa/0x1b [ 2116.983285] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2116.988401] ? lock_downgrade+0x810/0x810 [ 2116.992560] ? ___might_sleep+0x163/0x280 [ 2116.996813] __should_failslab+0x121/0x190 [ 2117.001062] should_failslab+0x9/0x14 [ 2117.004872] kmem_cache_alloc_node_trace+0x270/0x720 [ 2117.009983] ? __alloc_skb+0xd5/0x5e0 [ 2117.013791] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 2117.019254] __kmalloc_node_track_caller+0x3d/0x70 [ 2117.024192] __kmalloc_reserve.isra.0+0x40/0xf0 [ 2117.028873] __alloc_skb+0x10b/0x5e0 [ 2117.032597] ? skb_scrub_packet+0x440/0x440 [ 2117.036927] ? tcp_poll+0xc60/0xc60 [ 2117.040558] ? lock_sock_nested+0xe2/0x120 [ 2117.044797] ? __local_bh_enable_ip+0x15a/0x270 [ 2117.049499] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2117.054090] ? lock_sock_nested+0x9a/0x120 [ 2117.058340] tcp_send_fin+0x1f4/0xbb0 [ 2117.062152] tcp_shutdown+0x107/0x130 [ 2117.065958] ? tcp_set_state+0x7e0/0x7e0 [ 2117.070029] inet_shutdown+0x1bd/0x3d0 [ 2117.073926] __sys_shutdown+0x117/0x1d0 [ 2117.077907] ? __ia32_sys_getsockopt+0x150/0x150 [ 2117.082672] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2117.087435] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2117.092210] ? do_syscall_64+0x26/0x610 [ 2117.096193] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2117.101566] ? do_syscall_64+0x26/0x610 [ 2117.105545] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2117.110141] __x64_sys_shutdown+0x54/0x80 [ 2117.114295] do_syscall_64+0x103/0x610 [ 2117.118191] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2117.123382] RIP: 0033:0x457f29 [ 2117.126582] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2117.145498] RSP: 002b:00007f8af8992c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 15:30:17 executing program 3: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) clone(0x3103001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pause() r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x200, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) renameat2(r1, &(0x7f0000000280)='./file0\x00', r2, &(0x7f0000000300)='./file0\x00', 0x2) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20002, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f0000000180)={r4, &(0x7f00000000c0)=""/103}) tkill(r0, 0x23) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000200)) 15:30:17 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}}, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xc45, 0x240000) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:17 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2117.153213] RAX: ffffffffffffffda RBX: 00007f8af8992c90 RCX: 0000000000457f29 [ 2117.160496] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 2117.167771] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2117.175043] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8af89936d4 [ 2117.182313] R13: 00000000004c6228 R14: 00000000004db400 R15: 0000000000000004 15:30:17 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00002abd7000ffdbdf2508000000"], 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:17 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:17 executing program 4: r0 = gettid() r1 = memfd_create(0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x20601, 0x0) readlink(0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x0, 0x0) lsetxattr$security_ima(0x0, &(0x7f0000000380)='security.ima\x00', 0x0, 0x0, 0x2) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) fcntl$getownex(r3, 0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2, 0x0) kcmp(r0, r0, 0x0, r4, 0xffffffffffffffff) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x4a3656daf7b4822f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f00000009c0), r5}}, 0x18) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@local}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000780)=ANY=[@ANYBLOB="0300000000000c000500000000000000f8ffffffffffffff02000000000000005043893485abbbab7b8dd07e7a9dc214181cb56e5793ea5f3202cdc5e42c2030a9ec1d21e095a8df52b3f3bb9f85f6268437de735ffdba750f65ea2ec22e61a0833b31bc6aa85b4f893a31eebb2475bc78c0011da408805d68a0bd7b8beeb2d38f82936023ac3fa4f50d5f2c6561cf8d011529286fec73df9659c75b14c9d81cd8586f78a164d9eb69e0"]) request_key(&(0x7f0000000140)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000280)={0x13, 0x10, 0xfa00, {&(0x7f0000000c80), r5, 0x5}}, 0x18) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000100)={0x2, 0xffffffffffffffff, 0x1f, 0x4, 0x10001, 0x6}) close(r2) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000000)=""/246) 15:30:17 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:17 executing program 1 (fault-call:7 fault-nth:2): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x1) 15:30:17 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.ima\x00', &(0x7f0000000480)=@v1={0x2, "0917"}, 0x3, 0x2) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x6, 0x4280) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000340)=0x4) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0x401, 0x70bd2d, 0x25dfdbff, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'eth', 0x3a, 'bcsf0\x00'}}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) r4 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x720, 0x0) 15:30:17 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:17 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040)=0x6, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) recvfrom(r1, &(0x7f0000000100)=""/94, 0x5e, 0x100, &(0x7f0000000240)=@nfc={0x27, 0x1, 0x2, 0x3}, 0x80) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:30:17 executing program 4: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, 0x0, 0xe3) r1 = dup(0xffffffffffffffff) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x1}, 0x10) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0xccc4, 0x3f, 0x0, 0xffffffffffffffff}) dup2(r3, r4) unshare(0x44000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@initdev, @in=@multicast1}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8) connect$unix(0xffffffffffffffff, &(0x7f0000000b00)=@file={0x1, './bus\x00'}, 0x6e) syz_open_procfs(0x0, 0x0) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f00000002c0)='\x00', 0x1, 0x0) removexattr(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xfffffffffffffff7) msgctl$MSG_STAT(0x0, 0xb, 0x0) ioctl$SIOCGSTAMPNS(r5, 0x8907, 0x0) socket$pptp(0x18, 0x1, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) [ 2117.799592] FAULT_INJECTION: forcing a failure. [ 2117.799592] name failslab, interval 1, probability 0, space 0, times 0 [ 2117.817738] CPU: 0 PID: 7860 Comm: syz-executor.1 Not tainted 5.0.0+ #8 [ 2117.824511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2117.833860] Call Trace: [ 2117.833887] dump_stack+0x172/0x1f0 [ 2117.833909] should_fail.cold+0xa/0x1b [ 2117.833927] ? __nf_conntrack_find_get+0xe45/0x1960 [ 2117.833947] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2117.854131] ? __nf_conntrack_find_get+0xe45/0x1960 [ 2117.856422] IPVS: ftp: loaded support on port[0] = 21 [ 2117.859167] __should_failslab+0x121/0x190 [ 2117.859187] should_failslab+0x9/0x14 [ 2117.859202] kmem_cache_alloc+0x47/0x6f0 [ 2117.859221] ? __nf_conntrack_find_get+0xe6c/0x1960 [ 2117.859237] __nf_conntrack_alloc+0xdb/0x680 [ 2117.881514] init_conntrack.isra.0+0xe2c/0x1170 [ 2117.881534] ? nf_conntrack_alloc+0x50/0x50 [ 2117.881555] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2117.881572] ? ipt_do_table+0xf1e/0x1b90 [ 2117.881585] ? __lock_acquire+0x53b/0x4700 [ 2117.881605] nf_conntrack_in+0xd93/0x1410 [ 2117.890677] ? nf_conntrack_update+0x960/0x960 [ 2117.890695] ? __do_replace+0x910/0x910 [ 2117.890709] ? __lock_acquire+0x53b/0x4700 [ 2117.890739] ipv4_conntrack_local+0x169/0x210 [ 2117.890757] nf_hook_slow+0xbf/0x1f0 [ 2117.890777] __ip_local_out+0x403/0x880 [ 2117.900612] ? ip_finish_output+0xd50/0xd50 [ 2117.900633] ? ip_append_data.part.0+0x170/0x170 [ 2117.900649] ? __lock_is_held+0xb6/0x140 [ 2117.900664] ? check_preemption_disabled+0x48/0x290 [ 2117.900683] ip_local_out+0x2d/0x1b0 [ 2117.900699] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 2117.900715] __ip_queue_xmit+0x86f/0x1bf0 [ 2117.908993] ? kasan_check_write+0x14/0x20 [ 2117.909018] ip_queue_xmit+0x5a/0x70 [ 2117.909036] __tcp_transmit_skb+0x1a32/0x3750 [ 2117.909063] ? __tcp_select_window+0x8b0/0x8b0 [ 2117.909085] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2117.917830] tcp_write_xmit+0xe83/0x5310 [ 2117.917845] ? tcp_established_options+0x29d/0x4d0 [ 2117.917880] __tcp_push_pending_frames+0xb4/0x350 [ 2117.917898] tcp_send_fin+0x149/0xbb0 [ 2117.917918] tcp_shutdown+0x107/0x130 [ 2117.917934] ? tcp_set_state+0x7e0/0x7e0 [ 2117.930617] inet_shutdown+0x1bd/0x3d0 [ 2117.930636] __sys_shutdown+0x117/0x1d0 [ 2117.930652] ? __ia32_sys_getsockopt+0x150/0x150 [ 2117.930669] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2117.930685] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2117.930699] ? do_syscall_64+0x26/0x610 [ 2117.930716] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2117.942685] ? do_syscall_64+0x26/0x610 [ 2117.942701] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2117.942719] __x64_sys_shutdown+0x54/0x80 [ 2117.942736] do_syscall_64+0x103/0x610 [ 2117.942754] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2117.942766] RIP: 0033:0x457f29 [ 2117.942781] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 15:30:18 executing program 3: r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, 0x1c) flock(r0, 0x0) accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c) 15:30:18 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:18 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="0f019c317cb70e19260f32b9bb0a0000b8e3d00000ba000000000f30c4c159dfe567f0803442dcf43e0fdc1f0f38027d00640fc75f0c660f38801cec", 0x3c}], 0x1, 0x42, &(0x7f0000000140)=[@dstype0={0x6, 0xa}, @dstype0={0x6, 0x6}], 0x2) r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r3 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r5 = dup2(r4, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:18 executing program 1 (fault-call:7 fault-nth:3): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x1) [ 2117.956588] RSP: 002b:00007f8af8992c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 2117.956603] RAX: ffffffffffffffda RBX: 00007f8af8992c90 RCX: 0000000000457f29 [ 2117.956612] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 2117.956621] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2117.956630] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8af89936d4 [ 2117.956639] R13: 00000000004c6228 R14: 00000000004db400 R15: 0000000000000004 [ 2118.164361] FAULT_INJECTION: forcing a failure. [ 2118.164361] name failslab, interval 1, probability 0, space 0, times 0 [ 2118.262627] CPU: 1 PID: 7882 Comm: syz-executor.1 Not tainted 5.0.0+ #8 [ 2118.269427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2118.269435] Call Trace: [ 2118.269472] dump_stack+0x172/0x1f0 [ 2118.269500] should_fail.cold+0xa/0x1b [ 2118.269516] ? mark_held_locks+0x100/0x100 [ 2118.269537] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2118.269551] ? should_fail+0x14d/0x85c [ 2118.269566] ? __nf_conntrack_find_get+0xe45/0x1960 [ 2118.269594] __should_failslab+0x121/0x190 [ 2118.285135] should_failslab+0x9/0x14 [ 2118.285152] __kmalloc_track_caller+0x6d/0x740 [ 2118.285170] ? lock_downgrade+0x810/0x810 [ 2118.285185] ? nf_ct_ext_add+0x2a9/0x640 [ 2118.285204] __krealloc+0x71/0xc0 [ 2118.285221] nf_ct_ext_add+0x2a9/0x640 [ 2118.307397] init_conntrack.isra.0+0x439/0x1170 [ 2118.307418] ? nf_conntrack_alloc+0x50/0x50 [ 2118.307439] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2118.307455] ? ipt_do_table+0xf1e/0x1b90 [ 2118.307480] ? __lock_acquire+0x53b/0x4700 [ 2118.328260] nf_conntrack_in+0xd93/0x1410 [ 2118.328290] ? nf_conntrack_update+0x960/0x960 [ 2118.328307] ? __do_replace+0x910/0x910 [ 2118.328321] ? __lock_acquire+0x53b/0x4700 [ 2118.328349] ipv4_conntrack_local+0x169/0x210 [ 2118.328368] nf_hook_slow+0xbf/0x1f0 [ 2118.328389] __ip_local_out+0x403/0x880 [ 2118.328405] ? ip_finish_output+0xd50/0xd50 [ 2118.354259] ? ip_append_data.part.0+0x170/0x170 [ 2118.354276] ? __lock_is_held+0xb6/0x140 [ 2118.354292] ? check_preemption_disabled+0x48/0x290 [ 2118.354311] ip_local_out+0x2d/0x1b0 [ 2118.354330] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 2118.367259] __ip_queue_xmit+0x86f/0x1bf0 [ 2118.367278] ? kasan_check_write+0x14/0x20 [ 2118.367303] ip_queue_xmit+0x5a/0x70 [ 2118.367320] __tcp_transmit_skb+0x1a32/0x3750 [ 2118.367346] ? __tcp_select_window+0x8b0/0x8b0 [ 2118.375575] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2118.375596] tcp_write_xmit+0xe83/0x5310 [ 2118.375611] ? tcp_established_options+0x29d/0x4d0 [ 2118.375644] __tcp_push_pending_frames+0xb4/0x350 [ 2118.387788] tcp_send_fin+0x149/0xbb0 [ 2118.387812] tcp_shutdown+0x107/0x130 [ 2118.387827] ? tcp_set_state+0x7e0/0x7e0 [ 2118.387843] inet_shutdown+0x1bd/0x3d0 [ 2118.387861] __sys_shutdown+0x117/0x1d0 [ 2118.387875] ? __ia32_sys_getsockopt+0x150/0x150 [ 2118.387893] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2118.387908] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2118.387923] ? do_syscall_64+0x26/0x610 [ 2118.387939] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2118.397004] ? do_syscall_64+0x26/0x610 [ 2118.397021] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2118.397039] __x64_sys_shutdown+0x54/0x80 15:30:18 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:18 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x14000, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x37a}, 0x120) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x9, 0x40000) r1 = msgget(0x1, 0x400) msgsnd(r1, &(0x7f00000001c0)={0x3, "a428edf768eea1f45f8d894345e9e196af44c0e41aca63fc2b46767748bb6dce4c175f872dc04733c652ef2727513c7c80f1a3c829d0fea39c083ed8e62f4ef7603622e316be6032b59b2c594d24665e65d10614a000eececda7f9f611ddc3cd153149"}, 0x6b, 0x800) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000100)=""/177) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x8000, 0x0) 15:30:18 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$sndseq(&(0x7f0000043ff3)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) unshare(0x8000000) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000200)=""/244, 0xfffffff8, 0x0, 0x0) r2 = gettid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) ustat(0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x3) r3 = syz_open_dev$dmmidi(0x0, 0x8, 0x10000) syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x5, 0x80) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f00000001c0)={0x0, 0x0, 0x91, &(0x7f0000000140)=0xd593}) [ 2118.397056] do_syscall_64+0x103/0x610 [ 2118.397074] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2118.397086] RIP: 0033:0x457f29 [ 2118.397101] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2118.409851] RSP: 002b:00007f8af8992c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 2118.409866] RAX: ffffffffffffffda RBX: 00007f8af8992c90 RCX: 0000000000457f29 [ 2118.409875] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 2118.409884] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2118.409893] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8af89936d4 [ 2118.409902] R13: 00000000004c6228 R14: 00000000004db400 R15: 0000000000000004 15:30:18 executing program 1 (fault-call:7 fault-nth:4): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x1) 15:30:18 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3300000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:18 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x101000, 0x0) getsockopt$inet_dccp_buf(r0, 0x21, 0xe, &(0x7f0000000480)=""/210, &(0x7f0000000580)=0xd2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x301000, 0x0) write$P9_RCLUNK(r2, &(0x7f0000000100)={0x7, 0x79, 0x2}, 0x7) r3 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) pread64(r1, &(0x7f0000000240)=""/214, 0xd6, 0x0) sendto$inet(r4, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f00000003c0)={0x83bb, 0xb34, &(0x7f0000000140)="7a61e06b386165aa16628f83d8dc250c3eb474641984ebaf19dd", &(0x7f0000000180)="6c15878a20bfc4a7e6a06b5e5cdf5693ed923ca3e1ee6af981abb4cdfdad65", 0x1a, 0x1f}) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) write$binfmt_elf64(r0, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0xa8e6, 0x608, 0xb6, 0x800, 0x2, 0x3e, 0x7fff, 0x272, 0x40, 0xae, 0x8, 0x9, 0x38, 0x1, 0x1ff, 0x8001, 0xa8d0}, [{0x6, 0x80000000, 0x9, 0x5, 0x7f, 0x5, 0x8, 0x78}], "2d2a48f9a14b1d1ad053871a08fffb43ac3fe0bd7bf5af09fdd8e997e9859154b802d871d0e3bef86878a42fb2d98d28eb0570c5134f982db12ecfa5c2d10c134814b8993e70815f6f8b46ce29f6fb505735ecb84c7fef7c7d64012bef0c464de9e0d31fd16db6cc7889f9200985c93ab2bd8b7c72ea3987fdfcb6bf09dc22ea91c6f5c81f7fc8183627ed3b66b54c8f34915c56fdbd8185919cacf4df83296e396fc7d2951f73", [[], [], []]}, 0x41f) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:30:18 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$sndseq(&(0x7f0000043ff3)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) unshare(0x8000000) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000200)=""/244, 0xfffffff8, 0x0, 0x0) r2 = gettid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) ustat(0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x3) r3 = syz_open_dev$dmmidi(0x0, 0x8, 0x10000) syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x5, 0x80) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f00000001c0)={0x0, 0x0, 0x91, &(0x7f0000000140)=0xd593}) [ 2118.896353] FAULT_INJECTION: forcing a failure. [ 2118.896353] name failslab, interval 1, probability 0, space 0, times 0 [ 2118.924808] CPU: 1 PID: 7920 Comm: syz-executor.1 Not tainted 5.0.0+ #8 [ 2118.931577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2118.940929] Call Trace: [ 2118.943532] dump_stack+0x172/0x1f0 [ 2118.947184] should_fail.cold+0xa/0x1b [ 2118.951090] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2118.956208] __should_failslab+0x121/0x190 [ 2118.960456] should_failslab+0x9/0x14 [ 2118.964279] kmem_cache_alloc_node+0x56/0x710 [ 2118.968795] __alloc_skb+0xd5/0x5e0 [ 2118.972429] ? skb_scrub_packet+0x440/0x440 [ 2118.976756] ? tcp_mstamp_refresh+0x16/0xf0 [ 2118.981088] ? find_held_lock+0x35/0x130 [ 2118.985160] __tcp_send_ack.part.0+0x6a/0x5b0 [ 2118.989671] tcp_send_ack+0x88/0xa0 [ 2118.993303] tcp_send_dupack+0xe2/0x8f0 [ 2118.997287] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2119.002834] ? tcp_oow_rate_limited+0x1b4/0x320 [ 2119.007516] tcp_validate_incoming+0x1047/0x1660 [ 2119.012679] tcp_rcv_state_process+0xb6b/0x4d93 [ 2119.017355] ? mark_held_locks+0x100/0x100 [ 2119.021603] ? tcp_finish_connect+0x510/0x510 [ 2119.026103] ? __release_sock+0xca/0x3a0 [ 2119.030172] ? find_held_lock+0x35/0x130 [ 2119.034242] ? mark_held_locks+0xb1/0x100 [ 2119.038400] ? __local_bh_enable_ip+0x15a/0x270 [ 2119.043092] ? _raw_spin_unlock_bh+0x31/0x40 [ 2119.047507] ? __local_bh_enable_ip+0x15a/0x270 [ 2119.052181] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2119.056778] tcp_v4_do_rcv+0x351/0x8d0 [ 2119.060669] ? tcp_v4_do_rcv+0x351/0x8d0 [ 2119.064742] __release_sock+0x12e/0x3a0 [ 2119.068727] release_sock+0x59/0x1c0 [ 2119.072449] ? tcp_set_state+0x7e0/0x7e0 [ 2119.076526] inet_shutdown+0x1fd/0x3d0 [ 2119.080424] __sys_shutdown+0x117/0x1d0 [ 2119.084409] ? __ia32_sys_getsockopt+0x150/0x150 [ 2119.088664] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2119.089175] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2119.089192] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2119.089207] ? do_syscall_64+0x26/0x610 [ 2119.089225] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2119.122855] ? do_syscall_64+0x26/0x610 [ 2119.124907] IPVS: ftp: loaded support on port[0] = 21 [ 2119.126836] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2119.126856] __x64_sys_shutdown+0x54/0x80 [ 2119.126876] do_syscall_64+0x103/0x610 [ 2119.144631] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2119.144644] RIP: 0033:0x457f29 [ 2119.144660] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2119.144671] RSP: 002b:00007f8af8992c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 2119.171922] RAX: ffffffffffffffda RBX: 00007f8af8992c90 RCX: 0000000000457f29 [ 2119.171931] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 2119.171940] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2119.171949] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8af89936d4 [ 2119.171958] R13: 00000000004c6228 R14: 00000000004db400 R15: 0000000000000004 15:30:21 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000028bd7000ffdbdf2408000000"], 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x9, 0x10000) r3 = accept4(r2, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000140)=0x80, 0x80800) r4 = dup2(r1, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000480), &(0x7f00000004c0)=0x4) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000440)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000240)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}, @in6={0xa, 0x4e24, 0x81, @empty, 0x1}, @in6={0xa, 0x4e23, 0xffffffff, @remote, 0x4}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, [], 0x27}, 0xfff}], 0x80) 15:30:21 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:21 executing program 1 (fault-call:7 fault-nth:5): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x1) 15:30:21 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$sndseq(&(0x7f0000043ff3)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) unshare(0x8000000) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000200)=""/244, 0xfffffff8, 0x0, 0x0) r2 = gettid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) ustat(0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x3) r3 = syz_open_dev$dmmidi(0x0, 0x8, 0x10000) syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x5, 0x80) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f00000001c0)={0x0, 0x0, 0x91, &(0x7f0000000140)=0xd593}) 15:30:21 executing program 4: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, 0x0, 0xe3) r1 = dup(0xffffffffffffffff) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x1}, 0x10) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0xccc4, 0x3f, 0x0, 0xffffffffffffffff}) dup2(r3, r4) unshare(0x44000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@initdev, @in=@multicast1}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8) connect$unix(0xffffffffffffffff, &(0x7f0000000b00)=@file={0x1, './bus\x00'}, 0x6e) syz_open_procfs(0x0, 0x0) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f00000002c0)='\x00', 0x1, 0x0) removexattr(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xfffffffffffffff7) msgctl$MSG_STAT(0x0, 0xb, 0x0) ioctl$SIOCGSTAMPNS(r5, 0x8907, 0x0) socket$pptp(0x18, 0x1, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 15:30:21 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000300600000000000020040000d00100000000000000000000600500006005000060050000600500006005000004000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="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"], 0x690) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) [ 2121.310807] FAULT_INJECTION: forcing a failure. [ 2121.310807] name failslab, interval 1, probability 0, space 0, times 0 [ 2121.372279] CPU: 0 PID: 7938 Comm: syz-executor.1 Not tainted 5.0.0+ #8 [ 2121.379060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2121.388410] Call Trace: [ 2121.391019] dump_stack+0x172/0x1f0 [ 2121.394668] should_fail.cold+0xa/0x1b [ 2121.398570] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2121.403684] ? kasan_check_read+0x11/0x20 [ 2121.407840] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2121.413380] ? should_fail+0x14d/0x85c [ 2121.417272] __should_failslab+0x121/0x190 [ 2121.421521] should_failslab+0x9/0x14 [ 2121.425328] kmem_cache_alloc_node_trace+0x5a/0x720 [ 2121.430350] ? __alloc_skb+0xd5/0x5e0 [ 2121.434157] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 2121.439620] __kmalloc_node_track_caller+0x3d/0x70 [ 2121.444562] __kmalloc_reserve.isra.0+0x40/0xf0 [ 2121.449239] __alloc_skb+0x10b/0x5e0 [ 2121.452961] ? skb_scrub_packet+0x440/0x440 [ 2121.452978] ? tcp_mstamp_refresh+0x16/0xf0 [ 2121.452996] ? find_held_lock+0x35/0x130 [ 2121.465676] __tcp_send_ack.part.0+0x6a/0x5b0 [ 2121.465684] IPVS: ftp: loaded support on port[0] = 21 [ 2121.470185] tcp_send_ack+0x88/0xa0 [ 2121.478978] tcp_send_dupack+0xe2/0x8f0 [ 2121.482960] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2121.488512] ? tcp_oow_rate_limited+0x1b4/0x320 [ 2121.493195] tcp_validate_incoming+0x1047/0x1660 [ 2121.497966] tcp_rcv_state_process+0xb6b/0x4d93 [ 2121.497980] ? mark_held_locks+0x100/0x100 [ 2121.498002] ? tcp_finish_connect+0x510/0x510 [ 2121.498018] ? __release_sock+0xca/0x3a0 [ 2121.498033] ? find_held_lock+0x35/0x130 [ 2121.498050] ? mark_held_locks+0xb1/0x100 [ 2121.498067] ? __local_bh_enable_ip+0x15a/0x270 [ 2121.498080] ? _raw_spin_unlock_bh+0x31/0x40 [ 2121.498094] ? __local_bh_enable_ip+0x15a/0x270 [ 2121.498115] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2121.516032] tcp_v4_do_rcv+0x351/0x8d0 [ 2121.516049] ? tcp_v4_do_rcv+0x351/0x8d0 [ 2121.516067] __release_sock+0x12e/0x3a0 [ 2121.533307] release_sock+0x59/0x1c0 [ 2121.550443] ? tcp_set_state+0x7e0/0x7e0 [ 2121.562160] inet_shutdown+0x1fd/0x3d0 [ 2121.566056] __sys_shutdown+0x117/0x1d0 15:30:21 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000000040)=0x7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:21 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2121.566071] ? __ia32_sys_getsockopt+0x150/0x150 [ 2121.574781] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2121.579540] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2121.579557] ? do_syscall_64+0x26/0x610 [ 2121.579572] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2121.579586] ? do_syscall_64+0x26/0x610 [ 2121.579601] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2121.579619] __x64_sys_shutdown+0x54/0x80 [ 2121.579636] do_syscall_64+0x103/0x610 [ 2121.579655] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2121.579668] RIP: 0033:0x457f29 [ 2121.597677] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2121.597686] RSP: 002b:00007f8af8992c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 2121.597700] RAX: ffffffffffffffda RBX: 00007f8af8992c90 RCX: 0000000000457f29 [ 2121.597713] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 2121.637539] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 15:30:21 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5800000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2121.637549] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8af89936d4 [ 2121.637558] R13: 00000000004c6228 R14: 00000000004db400 R15: 0000000000000004 15:30:21 executing program 1 (fault-call:7 fault-nth:6): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x1) 15:30:21 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:21 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x4a, &(0x7f0000000340)=[{&(0x7f0000000380)="24000000200007041dfffd946f610500020000001f00000000000800080006000400ff7e", 0x24}], 0x1}, 0x0) setsockopt$inet_dccp_int(r0, 0x21, 0xe, &(0x7f0000000000)=0x1f, 0x4) 15:30:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x1) 15:30:21 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=r1) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x2) 15:30:21 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4000, &(0x7f0000000080), 0x2, r2, 0xc}) r3 = dup2(r2, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 2122.372000] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2122.498674] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 15:30:22 executing program 4: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, 0x0, 0xe3) r1 = dup(0xffffffffffffffff) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x1}, 0x10) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0xccc4, 0x3f, 0x0, 0xffffffffffffffff}) dup2(r3, r4) unshare(0x44000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@initdev, @in=@multicast1}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8) connect$unix(0xffffffffffffffff, &(0x7f0000000b00)=@file={0x1, './bus\x00'}, 0x6e) syz_open_procfs(0x0, 0x0) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f00000002c0)='\x00', 0x1, 0x0) removexattr(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xfffffffffffffff7) msgctl$MSG_STAT(0x0, 0xb, 0x0) ioctl$SIOCGSTAMPNS(r5, 0x8907, 0x0) socket$pptp(0x18, 0x1, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 15:30:22 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000140)="0adc1f123c123f3188b070") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000000)=0x280000000) r4 = socket$netlink(0x10, 0x3, 0x400000000f) write$binfmt_misc(r4, &(0x7f0000000180)=ANY=[], 0x0) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 15:30:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x3) 15:30:22 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, [], 0x12}, 0x9}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={r2, 0x1000000000000}, &(0x7f00000003c0)=0x8) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(r1, 0x9) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000100)={0xffffffffffffbff8, "459cb76023a68f2417d302901863a2075d46c88f6ca18fe6e3b9518ac00b9971", 0x0, 0x9, 0x5, 0x800, 0x200040801}) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:30:22 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00e328bd7000ffdbdf32aa250800"], 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:22 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:22 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="14001d93", @ANYRES16=0x0, @ANYBLOB="000028bd7000ffdbdf2508000000"], 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8, 0x20000) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x4, 0x200) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x4) [ 2122.793669] IPVS: ftp: loaded support on port[0] = 21 15:30:22 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:22 executing program 5: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x200, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, r0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r3 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x7, 0x80180) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x408000, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000100)={r4, 0x1, 0x7f, r2}) r5 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r6 = dup2(r5, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x800}) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x7) [ 2123.431145] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 15:30:23 executing program 4: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, 0x0, 0xe3) r1 = dup(0xffffffffffffffff) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x1}, 0x10) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0xccc4, 0x3f, 0x0, 0xffffffffffffffff}) dup2(r3, r4) unshare(0x44000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@initdev, @in=@multicast1}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8) connect$unix(0xffffffffffffffff, &(0x7f0000000b00)=@file={0x1, './bus\x00'}, 0x6e) syz_open_procfs(0x0, 0x0) fsetxattr(0xffffffffffffffff, 0x0, &(0x7f00000002c0)='\x00', 0x1, 0x0) removexattr(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xfffffffffffffff7) msgctl$MSG_STAT(0x0, 0xb, 0x0) ioctl$SIOCGSTAMPNS(r5, 0x8907, 0x0) socket$pptp(0x18, 0x1, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000140)) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 15:30:23 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:23 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000040)=0x43cc) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:23 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x9) 15:30:23 executing program 3: mkdir(&(0x7f0000000bc0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0xc0ed0000, 0x0) 15:30:23 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)={0x20}) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x2, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000280)="df", 0x1, 0x6200010, 0x0, 0xfffffffffffffddf) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) [ 2123.695618] IPVS: ftp: loaded support on port[0] = 21 15:30:23 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:23 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0xa) 15:30:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f00000001c0)=0x1, 0x4) openat$md(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/md0\x00', 0x12000, 0x0) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x410) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80, 0x0) clock_getres(0x7, &(0x7f0000000200)) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000140)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x6, 0x9f, 0x8000, 0x101, 0x2, 0x19a00, 0x8}, 0x1c) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000240)=0x1, &(0x7f0000000280)=0x4) 15:30:23 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000028bd7000ffdbdf250800000035ff499bb62bf4f84163a8e863b5919644a58863f243c4bddd069bde96e7edffbc1b9628e3a081fd221c0d901040d47938d70b9654ad75004a292414d91cf24a849fd86f35c8bd18174b5f26821412b2cdd6347671be0e75df003843af039c1a711d75c08364e42b9b66c9bba50bf129df63b8ff6eac6936be65232cca9a42ddbe2764ae51f11737e1d6b2af9d36bc9fd9d0c2e965f8ed21fd14e49fcaf362fc2e35c17e9f6bd017e25c6095b4d29fbd50e92cc764d29f90dca885d9287e8f34b8b8a3f6c7ad81f8ad399e50b824066eabf9dc"], 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:23 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2123.870947] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 15:30:23 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) sync() [ 2124.345103] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 15:30:24 executing program 4: setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'U+', 0x3}, 0x28, 0x1) r0 = socket$kcm(0x10, 0x4, 0x0) recvmsg(r0, &(0x7f0000000200)={&(0x7f0000000180)=@nfc, 0x80, &(0x7f0000000800)=[{&(0x7f0000000340)=""/180, 0xb4}, {&(0x7f0000000400)=""/146, 0x92}, {&(0x7f00000004c0)=""/142, 0x8e}, {&(0x7f0000000580)=""/162, 0xa2}, {&(0x7f0000000640)=""/184, 0xb8}, {&(0x7f0000000000)=""/1, 0x1}, {&(0x7f0000000700)=""/252, 0xfc}], 0x7, &(0x7f0000000880)=""/118, 0x76}, 0x40010001) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000240)={0x0, 0x0, @stop_pts=0x7}) 15:30:24 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x300) 15:30:24 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f00000001c0)=0x1, 0x4) openat$md(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/md0\x00', 0x12000, 0x0) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x410) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80, 0x0) clock_getres(0x7, &(0x7f0000000200)) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000140)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x6, 0x9f, 0x8000, 0x101, 0x2, 0x19a00, 0x8}, 0x1c) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000240)=0x1, &(0x7f0000000280)=0x4) 15:30:24 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x800}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 2124.503737] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 15:30:24 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='ip6tnl0\x00') ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:30:24 executing program 5: openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x4000) r0 = mq_open(&(0x7f0000000100)='/dev/snd/seq\x00', 0x80, 0x2, &(0x7f0000000140)={0x1, 0x1, 0x6, 0x3, 0x2, 0x3, 0x67, 0x7}) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) socketpair(0xb, 0x0, 0x30, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x0, 0x7, 0x0, 0x2, 0x9, 0x101, 0x6, 0x40, 0x8, 0x5, 0x745c, 0x4, 0x3ff, 0x6, 0x10, 0x4}}) r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000480)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000004c0)={0x9264, 0xffff, 0x2, {0x2, @sdr={0x7975777f, 0x3}}}) write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:24 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:24 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x501) 15:30:24 executing program 4: ioctl(0xffffffffffffffff, 0xfaf, &(0x7f00000000c0)="c097f426549ac141ac2fabf8afd62a6fff09760aea5fddcf192c150501caad") r0 = creat(&(0x7f0000000000)='./file0\x00', 0x18) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000040)) 15:30:24 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000040)={"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"}) socket$inet(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000500)={0x0, 0x6}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000580)={0xff, 0x8, 0x1000, 0x8, r1}, &(0x7f00000005c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000440)={0x2, 0x20c, 0x7f, 0x9, 0x0}, &(0x7f0000000480)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000004c0)={r2}, 0x8) 15:30:24 executing program 4: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r0, 0x0, 0x2000427, 0x40) write(r0, &(0x7f0000002000)='/', 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xfec) write$P9_RRENAMEAT(r0, &(0x7f0000000080)={0x7}, 0x7) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000000140)='./file1\x00', 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x8, 0x100) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000000000/0x2000)=nil) shmctl$IPC_RMID(r2, 0x0) getpeername$netlink(r1, &(0x7f0000000100), &(0x7f0000000180)=0xc) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200000, 0x0) syz_extract_tcp_res(&(0x7f0000000040), 0x2, 0x40) setsockopt$inet_buf(r3, 0x0, 0x0, &(0x7f0000000240)="3d4514cedf509b3c4683db092291b990b782c692a2083f4ba59c7dc13ad01005ad4cb0afa80eb157c9c27906f193729615488075a3eb82e14920c5a0ae0e3f2db264fc7ede1ac434b412ed3e73e98fd6933fcf3e14f017ef5c4473630a6539cb54d1b5faeb2a121a324c45102ef02ed541246bf4a8709f02b315147bbced7470cc02c0cc02d9c05c44620e837f4853024d3d4b57587f7c7f1baf7b6dd8729c9ee1cc5419dcb8de1347f40b4679df1f846d6cb5f1975c39478f8a4370d635641526e21cae63eeafa7a2ed8a09d96792e42822ae691278", 0xd6) 15:30:24 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:24 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x10002) 15:30:24 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0xb0, 0x5d53, 'queue0\x00', 0x400}) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:24 executing program 3: openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x4000) r0 = mq_open(&(0x7f0000000100)='/dev/snd/seq\x00', 0x80, 0x2, &(0x7f0000000140)={0x1, 0x1, 0x6, 0x3, 0x2, 0x3, 0x67, 0x7}) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) socketpair(0xb, 0x0, 0x30, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x0, 0x7, 0x0, 0x2, 0x9, 0x101, 0x6, 0x40, 0x8, 0x5, 0x745c, 0x4, 0x3ff, 0x6, 0x10, 0x4}}) r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000480)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000004c0)={0x9264, 0xffff, 0x2, {0x2, @sdr={0x7975777f, 0x3}}}) write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:24 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:25 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) flistxattr(r0, &(0x7f0000000040)=""/3, 0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x28001, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:30:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x100000) 15:30:25 executing program 3: openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x4000) r0 = mq_open(&(0x7f0000000100)='/dev/snd/seq\x00', 0x80, 0x2, &(0x7f0000000140)={0x1, 0x1, 0x6, 0x3, 0x2, 0x3, 0x67, 0x7}) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) socketpair(0xb, 0x0, 0x30, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x0, 0x7, 0x0, 0x2, 0x9, 0x101, 0x6, 0x40, 0x8, 0x5, 0x745c, 0x4, 0x3ff, 0x6, 0x10, 0x4}}) r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000480)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000004c0)={0x9264, 0xffff, 0x2, {0x2, @sdr={0x7975777f, 0x3}}}) write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:25 executing program 4: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r0, 0x0, 0x2000427, 0x40) write(r0, &(0x7f0000002000)='/', 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xfec) write$P9_RRENAMEAT(r0, &(0x7f0000000080)={0x7}, 0x7) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000000140)='./file1\x00', 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x8, 0x100) r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000000000/0x2000)=nil) shmctl$IPC_RMID(r2, 0x0) getpeername$netlink(r1, &(0x7f0000000100), &(0x7f0000000180)=0xc) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200000, 0x0) syz_extract_tcp_res(&(0x7f0000000040), 0x2, 0x40) setsockopt$inet_buf(r3, 0x0, 0x0, &(0x7f0000000240)="3d4514cedf509b3c4683db092291b990b782c692a2083f4ba59c7dc13ad01005ad4cb0afa80eb157c9c27906f193729615488075a3eb82e14920c5a0ae0e3f2db264fc7ede1ac434b412ed3e73e98fd6933fcf3e14f017ef5c4473630a6539cb54d1b5faeb2a121a324c45102ef02ed541246bf4a8709f02b315147bbced7470cc02c0cc02d9c05c44620e837f4853024d3d4b57587f7c7f1baf7b6dd8729c9ee1cc5419dcb8de1347f40b4679df1f846d6cb5f1975c39478f8a4370d635641526e21cae63eeafa7a2ed8a09d96792e42822ae691278", 0xd6) 15:30:25 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0x100000000, @mcast1, 0x5}, {0xa, 0x4e21, 0x7, @mcast1, 0x10000}, 0x20, [0x5, 0x0, 0x4, 0x20, 0x9, 0x1000, 0x40, 0x9]}, 0x5c) r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x1ff, 0x0, 0x0, @tick, {}, {0x80000000}, @queue={0x1, {0x9, 0x5}}}], 0x30) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000001c0)={0xfffffff, 0xff, 0x8000, [], &(0x7f0000000080)={0x990bff, 0x7, [], @value=0x9}}) 15:30:25 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:25 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:25 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1408003a", @ANYRES16=0x0, @ANYBLOB="000028bd7000ffdbdf2508000000"], 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000400)={0x0, 0xe1, "ae4482f8ea89e3e1be90752bcee198e92b6d462ea64c6c983dee657e7586cd212a0025a559a22298c45fe3825c96d0b8594415634bf4e5975518983e713445a730f8faf5eebbbaf31b683952c67364cc3e9f41904da21078be7a382691fc3a469f545133a0cc5d1ac75c8c44d39cb5532b67fb444cbb3b8bab943019c4e7855c0746f71dda8eaa3eb5718fc1f0caa0131c0591d4cbdc4117f993f8e3d58238d33a45a2cd4a3fc072a631cee988a3270c8dfba39cca5884ae95b14d6854edaec6faceb231ac5a73901fa5a0fffde5ce0f1ad26bd703363edb6df6b80e3a419dd96a"}, &(0x7f0000000040)=0xe9) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r3, 0x8}, 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x2, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x4) mlockall(0x3) 15:30:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) connect$netlink(r1, &(0x7f0000000140)=@unspec, 0xc) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x80004e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x1) 15:30:25 executing program 3: openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x4000) r0 = mq_open(&(0x7f0000000100)='/dev/snd/seq\x00', 0x80, 0x2, &(0x7f0000000140)={0x1, 0x1, 0x6, 0x3, 0x2, 0x3, 0x67, 0x7}) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) socketpair(0xb, 0x0, 0x30, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x0, 0x7, 0x0, 0x2, 0x9, 0x101, 0x6, 0x40, 0x8, 0x5, 0x745c, 0x4, 0x3ff, 0x6, 0x10, 0x4}}) r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000480)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000004c0)={0x9264, 0xffff, 0x2, {0x2, @sdr={0x7975777f, 0x3}}}) write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:25 executing program 4: r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x0, 0x103000) r1 = syz_open_procfs(0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000200)=0xfffffffffffffff5, 0xfffffdda) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) getresgid(&(0x7f00000004c0), &(0x7f0000000500)=0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f0000000680)) mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='fuseblk\x00', 0x10000, &(0x7f0000000b00)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x9f388b4ee816ea79}}, {@allow_other='allow_other'}], [{@uid_lt={'uid<'}}]}}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000a80)="d85e678e676090b1343eb9c52bd02479d0747d8b2ab1410220300dba233c5193d6240d4a4d3d2a693cc7b07ce79ebbae29f214bee98043109616a4205ae885b9fa8c3b79353fa61bf3da3d814e673a4e0524a241d81a07f6dd09e1d0e34871ddf209e2e0ea4539e15d", 0x69}], 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={r4, 0x7fffffff, 0x4b73, 0xb7, 0x40, 0x6}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x169) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 15:30:25 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:26 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) socket$caif_seqpacket(0x25, 0x5, 0x5) getsockopt$inet_buf(r1, 0x0, 0x9, &(0x7f0000000100), &(0x7f0000000140)) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:30:26 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:26 executing program 3: openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x4000) r0 = mq_open(&(0x7f0000000100)='/dev/snd/seq\x00', 0x80, 0x2, &(0x7f0000000140)={0x1, 0x1, 0x6, 0x3, 0x2, 0x3, 0x67, 0x7}) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) socketpair(0xb, 0x0, 0x30, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x0, 0x7, 0x0, 0x2, 0x9, 0x101, 0x6, 0x40, 0x8, 0x5, 0x745c, 0x4, 0x3ff, 0x6, 0x10, 0x4}}) r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000480)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x1c, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f1238123f3188b070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000013000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f00000002c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x620401, 0x0) bind$vsock_dgram(r4, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0xc0f85403, &(0x7f00000000c0)) r5 = dup3(r2, r3, 0x0) dup3(r5, r1, 0x0) 15:30:26 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x1) pkey_alloc(0x0, 0x1) 15:30:26 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="7001ffdb02c32474000000000000000000000000000000000000000000006483038572ab6ae1146265d6f00b14849c0ac048195d2670f76fd76853ef51324046b17e6f30a2873e7061cf3adeb25a98d99492abc3252b88b1"], 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:26 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3300], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:26 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000600)={0x0, 0x8f9c, 0x8}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000680)=@assoc_value={r3, 0x5}, &(0x7f00000006c0)=0x8) r4 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) write$binfmt_aout(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="cf01ff0469010000c10100000500000098010000dd87000000000000000000009c811c1564d80f3200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f9c771d825cfeb6efeb2ce95e6aff51ce650c7f2a04e0e22b89b5f2337c3dbe89eef4562b26a97414772d93fc93788fbe823ecb007549a95bde8a3c1575f8604b3bd63baa4b0e843ae1c82fdc1f1ebf020f1ae368d65fb9664b7a634cf202c9bbabd40afc91c7db73a4518d89bc916aea1d7cce5a15aca30cd6e158cf4fccbfe8a999054f07228d5978512f079808f643f208380e52aff7baf13006e6dc276a28ea568e28f87c47301b52102fec26a30f40a0959d818d9f8fcc84bda6d1e8c56630d8fb5dac17cfb85"], 0x428) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r4, 0x4008ae48, &(0x7f0000000040)=0x7000) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000080)) 15:30:26 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000015, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc4c3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000400), &(0x7f0000000440)=0x4) sendto$inet(r1, &(0x7f00000001c0)="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", 0xfe, 0x20000001, &(0x7f0000000140)={0x2, 0x4e23, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) ioctl$TIOCGPTPEER(r1, 0x5441, 0x4) pipe2$9p(&(0x7f0000000040), 0x84000) shutdown(r0, 0x1) recvfrom$inet(r1, &(0x7f00000002c0)=""/212, 0xd4, 0x2, &(0x7f00000003c0)={0x2, 0x4e22, @multicast2}, 0x10) 15:30:26 executing program 3: openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x4000) r0 = mq_open(&(0x7f0000000100)='/dev/snd/seq\x00', 0x80, 0x2, &(0x7f0000000140)={0x1, 0x1, 0x6, 0x3, 0x2, 0x3, 0x67, 0x7}) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) socketpair(0xb, 0x0, 0x30, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x0, 0x7, 0x0, 0x2, 0x9, 0x101, 0x6, 0x40, 0x8, 0x5, 0x745c, 0x4, 0x3ff, 0x6, 0x10, 0x4}}) r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:26 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:26 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl$VIDIOC_ENUMSTD(r3, 0xc0485619, &(0x7f00000001c0)={0x7, 0x0, "018ae75a542f4df613e744c46083128edf95838ae9f7b2f4", {0x4, 0x8a67}}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x4106}) r4 = dup3(r0, r0, 0x80000) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000380)={0x7, @capture={0x0, 0x1, {0x1, 0x5}, 0x5, 0x1}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x84, 0x0) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f00000000c0)) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_flags=0x1}) 15:30:27 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) ioctl$VT_RELDISP(r0, 0x5605) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f0000000100)={0x8, &(0x7f0000000040)=[{0x9, 0x5, 0x1, 0x10001}, {0x90, 0x1, 0xffffffffffffffe0}, {0x200, 0x3, 0x9, 0x80000000}, {0x9, 0x7fffffff, 0xfffffffffffffff7}, {0x1, 0x6, 0x5, 0x8000000000}, {0x7, 0x3f, 0x4, 0x3}, {0x1000, 0x4, 0x3c, 0x1ff}, {0xee, 0xffffffffffffff80, 0x3, 0x7ff}]}) sendto$inet(r1, &(0x7f0000000080)="df", 0x0, 0x6200010, 0x0, 0x195) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000140)) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:30:27 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x2000, 0x0) r2 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000240)={{0x5, 0x2, 0x41f0ba6d, 0x40, 'syz1\x00', 0x8000}, 0x2, 0x20000000, 0x8000, r2, 0x5, 0xf954, 'syz1\x00', &(0x7f00000001c0)=['GPL]vmnet0(selfvboxnet1bdev-systemtrustedwlan1vboxnet1\x00', 'posix_acl_accessselinux\x00', 'cgroupem1}\x00', 'mime_type\x00', '\x00'], 0x65, [], [0x8000, 0xb793, 0x80, 0x5]}) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f00000007c0)={'filter\x00', 0x29, "19c54d427645f0c5323772483a6462a008c3fc5f7bac657b211c4f915eb6c0804ca575f4161544ba46"}, &(0x7f0000000840)=0x4d) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e22, @dev}, 0xffffffffffffff01) r3 = semget$private(0x0, 0x1, 0xa) semop(r3, &(0x7f0000000380)=[{0x4, 0x1}, {0x3, 0x4, 0x1800}, {0x5, 0x6, 0x1000}, {0x3, 0xffffffff, 0x1800}, {0x4, 0x6, 0x1000}, {0x4, 0x3e8, 0x1800}, {0x7, 0x5, 0x1800}, {0x7, 0x1ff, 0x1000}, {0x3, 0x2, 0x1000}, {0x2, 0x3, 0x1000}], 0xa) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) fgetxattr(r0, &(0x7f00000003c0)=@random={'osx.', 'mime_type\x00'}, &(0x7f0000000400)=""/239, 0xef) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x1) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000880)=r2) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) fstat(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r1, &(0x7f0000000700)={0x90, 0x0, 0x8, {0x5, 0x0, 0x200, 0x647b7b1c, 0x5b, 0x81, {0x4, 0x7, 0x9, 0x3, 0x7e2, 0x9, 0x7fffffff, 0x10000, 0x3, 0x5, 0x0, r4, r5, 0x5, 0x2}}}, 0x90) 15:30:27 executing program 3: openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x4000) r0 = mq_open(&(0x7f0000000100)='/dev/snd/seq\x00', 0x80, 0x2, &(0x7f0000000140)={0x1, 0x1, 0x6, 0x3, 0x2, 0x3, 0x67, 0x7}) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) socketpair(0xb, 0x0, 0x30, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x0, 0x7, 0x0, 0x2, 0x9, 0x101, 0x6, 0x40, 0x8, 0x5, 0x745c, 0x4, 0x3ff, 0x6, 0x10, 0x4}}) r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:27 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x40, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x7ff, 0x9b, 0x0, 0xffffffffffff8001, @tick, {0x4, 0x2}, {0x9, 0x2}, @raw8={"30dcfd3e2d29efad06e49ccd"}}, {0x0, 0x281b, 0x101, 0x1, @tick=0x3e3, {0x2, 0x80000001}, {0x9, 0x1}, @raw32={[0xed, 0x2, 0x79]}}], 0x60) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000400)=ANY=[@ANYBLOB="0100005ffdfdbb41551321827c303f26625a00a6955785f92ea078ebc155d2ea77533bb3df829592fd4fd456d8b1727109e8adea2fbff839cc7a18b0e3fa14c1cd47390c80b7d6fa14b4e10b77", @ANYRES32=0x0], &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={r4, 0x1, 0x3, 0x100}, &(0x7f0000000140)=0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:27 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:27 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xffffffffffffffc1, 0x4000) connect$caif(r0, &(0x7f00000001c0)=@dbg={0x25, 0x800, 0x9}, 0x18) r1 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e0000001aca5cb158bfd68382118fe2e1f5b9c380000ae64eabb7f2c281cd9b01e32d949e0089c690b46af403199f5cd47f85f8e44cfa648ca4685d066e6cbbaeb9859190a4f"], 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)=ANY=[@ANYBLOB="0180c200000000001400000008004500001c00004e2100089078"], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000100)={@random="20b6e6d9ac5e", @remote, [{[{0x9100, 0x3, 0x5, 0x3}], {0x8100, 0x101, 0x400}}], {@canfd={0xd, {{0x4, 0x8, 0xcb, 0x4}, 0x3b, 0x2, 0x0, 0x0, "e663c20955d93c360a9b5acf6a962ca25e7ee4d7fdbedba6c7aed72c38c0b02121d43df856acac39f3eea3813550dcbb6fc2d06ed5bcc18a856d9a050b3d4585"}}}}, &(0x7f0000000000)={0x0, 0x3, [0xa64, 0xcc9, 0x8f9, 0x945]}) 15:30:27 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5800], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:27 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) splice(r1, &(0x7f0000000040), r0, &(0x7f0000000080), 0x1, 0xa) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:27 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x1a000) chroot(&(0x7f0000000000)='./file0\x00') close(r0) 15:30:27 executing program 3: openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x4000) r0 = mq_open(&(0x7f0000000100)='/dev/snd/seq\x00', 0x80, 0x2, &(0x7f0000000140)={0x1, 0x1, 0x6, 0x3, 0x2, 0x3, 0x67, 0x7}) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) socketpair(0xb, 0x0, 0x30, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x0, 0x7, 0x0, 0x2, 0x9, 0x101, 0x6, 0x40, 0x8, 0x5, 0x745c, 0x4, 0x3ff, 0x6, 0x10, 0x4}}) r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) dup2(r4, r3) write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:27 executing program 1: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80200, 0x81) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x101000, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) socket(0x2, 0x3, 0x1) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r1, 0x1) 15:30:27 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:28 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:30:28 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000040)={0x4c00, 0xff, 0x8, 0x7}) 15:30:28 executing program 3: openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x4000) r0 = mq_open(&(0x7f0000000100)='/dev/snd/seq\x00', 0x80, 0x2, &(0x7f0000000140)={0x1, 0x1, 0x6, 0x3, 0x2, 0x3, 0x67, 0x7}) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) socketpair(0xb, 0x0, 0x30, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x0, 0x7, 0x0, 0x2, 0x9, 0x101, 0x6, 0x40, 0x8, 0x5, 0x745c, 0x4, 0x3ff, 0x6, 0x10, 0x4}}) r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) dup2(r4, r3) write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp\x00') preadv(r2, &(0x7f0000000480), 0x200000000000010f, 0x0) mknod(&(0x7f00000004c0)='./file0\x00', 0xc403, 0x81) prctl$PR_CAPBSET_DROP(0x18, 0x10000000016) getpeername(0xffffffffffffffff, 0x0, 0x0) chown(0xfffffffffffffffe, 0x0, 0x0) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x1) 15:30:28 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], 0x309) ioctl$SG_GET_REQUEST_TABLE(r0, 0x227d, &(0x7f0000000100)) [ 2128.387810] sg_write: data in/out 808464396/735 bytes for SCSI command 0x0-- guessing data in; [ 2128.387810] program syz-executor.4 not setting count and/or reply_len properly [ 2128.424099] sg_write: data in/out 808464396/735 bytes for SCSI command 0x0-- guessing data in; [ 2128.424099] program syz-executor.4 not setting count and/or reply_len properly 15:30:28 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:28 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000001080)='/dev/dsp#\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x8, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r1, 0xffffffffffffff7a}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$int_in(r0, 0x80000080044d76, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x5, 0xfffffffffffffffa, 0x1, 0x2, 0x6, 0xc7, 0x8c98, 0x7, 0x5, 0x80000000}) 15:30:28 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="20010000e584191bc6f343c4fa672197dc38176c4b1240afd6c5f3a3e50fed35c2e57760c3ffb0245061d553933a681458cd2787c5095a7a491a46eb2c753db2a2edc68607592e2ef18aeb6ed23388574e4c4f9cd90acd8aa5770f47ce8338e2f43509ae551faf26491ba21e4c113cf4b47ecad587b2a0a12467a626fdeaaf335027a7069d16b7e1699c917fd77751ad6c4c3497df701c2944fb03fab9fe", @ANYRES16=0x0, @ANYBLOB="000028bd7000ffdbdf2508000000"], 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000040)={0x8, 0x0, 0x8, 0xe48, 0x891, 0x64}) 15:30:28 executing program 3: openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x4000) r0 = mq_open(&(0x7f0000000100)='/dev/snd/seq\x00', 0x80, 0x2, &(0x7f0000000140)={0x1, 0x1, 0x6, 0x3, 0x2, 0x3, 0x67, 0x7}) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) socketpair(0xb, 0x0, 0x30, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x0, 0x7, 0x0, 0x2, 0x9, 0x101, 0x6, 0x40, 0x8, 0x5, 0x745c, 0x4, 0x3ff, 0x6, 0x10, 0x4}}) r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) dup2(r4, r3) write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:28 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="40970f18eb0544bd70a41dffde25743d4d3a69c75de636b451bede9fee256421eddfbc5124bd08d89367602b56593bcf27"], 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:28 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:29 executing program 3: openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x4000) r0 = mq_open(&(0x7f0000000100)='/dev/snd/seq\x00', 0x80, 0x2, &(0x7f0000000140)={0x1, 0x1, 0x6, 0x3, 0x2, 0x3, 0x67, 0x7}) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) socketpair(0xb, 0x0, 0x30, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x0, 0x7, 0x0, 0x2, 0x9, 0x101, 0x6, 0x40, 0x8, 0x5, 0x745c, 0x4, 0x3ff, 0x6, 0x10, 0x4}}) r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:29 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000040)=0xe8) r4 = geteuid() setreuid(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffe}, 0x14) dup2(r0, r1) 15:30:29 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:29 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b40)=ANY=[@ANYBLOB="6401000886a565fe61c46d5fcd67fdb83f2e403e7dcb0bd0f8ecf97b298a000000009eaf8a8ff2e839d7199f09b612a656249cd4eac47039173aa0475e007bbdc320c749c6a092a26e816a3cb5a2dd880ad3d25dc7a1bcc839d1bd578f42df7832f4e938e42472b8444215e201cda871d85617d5442b72ee4096f2fa0c3f10407a6de15b869d", @ANYRES16=0x0, @ANYBLOB="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"], 0x144}}, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f0000000400)=@pptp, &(0x7f0000000340)=0x80) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000840)=[@in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x0, @loopback, 0x8c3}], 0x68) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000740)={@in={{0x2, 0x4e21, @rand_addr=0x1ff}}, 0x0, 0xfffffffffa06f6bc, 0x0, "53760389762c1562e25940064590679a19b2cddea46879363930b278de142dd814dc86b187549c3eb0f7a60f1ce1aeffc11f05b763b0b2d4bb122c4b9473a1aa3b333aca82bf97fe16808c415fa16df4"}, 0xd8) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000040)={{0x99, 0x1}, {0x0, 0x10000}, 0x4, 0x4, 0x100000001}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f00000001c0)={{0x0, 0x2}, 'port0\x00', 0x5, 0x8004a, 0x1, 0x2, 0x249c, 0x0, 0x3, 0x0, 0x2, 0x4}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000500)={0x4, 0x6, 0x5}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) write$sndseq(r2, &(0x7f0000000100)=[{0x6, 0x3, 0xbd75, 0x9, @time={0x77359400}, {0x80, 0x6}, {0x2, 0x8}, @raw8={"309c53bc1d32bf87746d769b"}}, {0x1ff, 0x9, 0x7, 0x1, @time={0x0, 0x989680}, {0x8000, 0x400}, {0x4, 0x80}, @note={0x5, 0x4, 0x8001, 0x100000001}}, {0x7, 0x1, 0x6, 0x3, @tick=0x8001, {0x100, 0x7}, {0x4, 0xfffffffffffff684}, @addr={0x12000000, 0x4a702f38}}], 0x90) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000540)=0xffffffffffffffff, 0x4) socket$inet(0x2, 0x80004, 0xd) 15:30:29 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0xaba, 0x40) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r1, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r1, 0x1) 15:30:29 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000140)={'veth0_to_hsr\x00', {0x2, 0x4e22, @broadcast}}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000540)={0x8c, "75a9cac9b3aa5317f781eb195c7cc5f215b6e071b55d52d6b3701db0e23c97f4", 0x1, 0x3eb, 0x80000001, 0xc000c, 0x4}) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000000040)=0xe8) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000400), &(0x7f00000005c0)=0x4) getgroups(0x4, &(0x7f0000000100)=[0xffffffffffffffff, 0xee01, 0xee01, 0xffffffffffffffff]) write$FUSE_ENTRY(r0, &(0x7f0000000480)={0x90, 0xffffffffffffffff, 0x4, {0x5, 0x1, 0x7, 0x9, 0x3070, 0xfff, {0x0, 0x8000, 0x1, 0x1, 0x1, 0x2, 0x4, 0x4, 0x61a, 0x7, 0x1, r2, r3, 0xff, 0x7}}}, 0x90) connect$rxrpc(r0, &(0x7f00000003c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0xffffffffffffffc1, @ipv4={[], [], @multicast2}, 0x9}}, 0x24) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) acct(&(0x7f0000000180)='./file0\x00') ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:30:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0x9, 0x0, 0x401, 0xf41, 0x0}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000240)={r2, 0x7}, &(0x7f0000000280)=0x8) 15:30:29 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:29 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp\x00') preadv(r2, &(0x7f0000000480), 0x200000000000010f, 0x0) mknod(&(0x7f00000004c0)='./file0\x00', 0xc403, 0x81) prctl$PR_CAPBSET_DROP(0x18, 0x10000000016) getpeername(0xffffffffffffffff, 0x0, 0x0) chown(0xfffffffffffffffe, 0x0, 0x0) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x1) 15:30:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_proto_private(r0, 0x89eb, &(0x7f0000000540)="20be5609e4f44f997022ef5eab365f01b945ec2672abeb2c9e0afef384366baafe9a41e52f4fcabbd6bfaf1a99559ad1e5d7410afaeec3c7a2e16250dde3103559b5bb24fcaaf1b00bae2fe375b28952ed92c85920d4eb2e20d3fb06e46207d08adbafc862268b9d45d576b052ca2c87a1d74746c6a03ad07964200ff8c6122eb831ac85bb4232b1b1f5e21ebe871ec95eed70a141dd3f312723d8964ddf904d06a7c83f096133b526ac6ddba4291f7b44668083f14628e8e3d26e2138f2f8a4dfe04b9fadf2ba04b5c61b495f8b64293578e7a23cb9fe1d0a8ec6953f9cf1b6e5fe8e2405d45d99d0738b739ca432c2c08cdf85312642a119d43a8e7b7cf129b5132ed8bb03ad5a86e7f24a8890de27053c43cc1f71866190b9e17983ca0a43fe410b5dc51e34fc2023bc1f4bdde1e2c2d946405a63df06559218fdfdc0cbed4d839631e9ae21f5a1b14b64e17ad8a369ab3c32a23773aa4c133f1f7cc66aad6c8a6f9e051270a8b332dd5f98de638b870d4a0e0b8a2c7430bf601041a241921eee0b2a99f0feb5a78dc3c5886df6ae248fece1317b88ada923215943aed4a9cebbaecae00a83f10fde77dde75ce91e575815d8b562edc2d0fa1b5cb34ac8d724ecde26e555f0d409a70ca3a938afc51d9226f4c67f067e5fc118dc26ec085bc79e14ffaf73ca70c307823a4b3bc997a06ff49811dd5250ed08606b533f982ffa272c2f76f4387fd3cf4e3bb6bf60b0d0b3f0bace463af0057cfcc7990e8c4babece2d8deeb8d443dcb64aa0d65332fab07d1987d07a8515b3f882f448d0d5168dfbb960b0e7919e0989253aba65dc90354b4382ecdde9c1f5b9961b8bda3f961bfb42126f2d1e4cd3b72eb55dbc823f358b0e149f13f0fb3b226619604896226c8f3795ed5460334e0dafa65dc73276a5ff806185db8a19609dea0a899a24f63e0b3e88b232c935cd806960ccd00c13b9714ce9fcc38a3c40be45b3fee2c74f9062078ff4100339747ab6d27e0d16aae6b33a5c71f256a392ab70469bc6767f6ca17e237f930b87441e0d66345b66748384056dceea4f1939c9ecf19db89cf3e68aefdfa449379fc5ae3049472bbdd967aab1e769edd1b5241f1872eae6440901c539eac894af0b621c55b53fe38c2c3928f1e91dd0998d30360a346ff1c182d3a2bd66cdaa178c5e6b324d37750cede4764ecbd4daf93ee1b260dd09cd012dc322c703bdb27658312a622f296e5a936a58bd492ad53629daeb4f5b5601ec664feb576007dee5f326fd2713f77e64b3b6d094edc3ddc9c964cddd7bb31c9c0aa0091e2b43a525952e16ec01b803d0bfaa0125620ffcd78a79cf7825d767a6c4cab351ae00f74ecd6a26b7d3aa37ab38244152c022cb631f2f858ec0f6873f058ba95cd95c5d4cdf7fcef40715f6a8cf7e2ab485dbfa7d9db969a248438ee8422f60221615fe0b4d00a79852c02f9e0285341645fe707647317b6974f5d49dfca74a091746673e7c35ee59bbfde7482d2b7101a1db308a9b2cffdec485b590061d8913f925c4dcd9f553dabdf0f96bc8721d33db4bf2a8e80265206646ca64af60b77dbe1f5cd83633c57dccd314da0c6cdecfbb676cc2de17fd93f307fe19096187d6abf20f1912d0259c25be88fcace3596327ea9cf499fba9f16ff4dc94e2af704145c5657bc3428a0897e18facd155f39bfaf93d672b4ec43267dbf799fcbafc23848f2e39bb419874d5e269a6dc4fd8d7f0b201f279efc040181c306a17c75bd7301492fea11ccf3bdc88390dd4f51c1ae2a4e676bd7d69d97da14aece6cabcb376c895203b1e22ca7f184fa2a1c36c5a1ed9903a4bfb466b9745977f3e748cc41a5601a9eac1e85de7721c7f84bfd1967b199d1ad117a634e5726456a4cea9948134e6c7cea92a56131fec3a238a12e6e2e364de0693e25578668dfd425361fcd82483826e9642be77920493cc4a229ed79bf1120c454c3858b3171ddbc196b98850166834ea6db2c3e6941a52225370f47c9b8c4948ea59fc17701bd05fa0c030d1f21953052df738d501ba7968fe4c1620be945d85a3671254e2bd6ff41cf749bd6f959845a0e36bd6268b044578455e59c54814a690f3cae7cecff6b7a748efdf97f5197706e4378680f410e85c39ab1dde5c637efa4aeee92433adee13375e87ca7ba4d4596b9181720a96e7e02ec363a02faa0a9658a1d6bf147d65150a6b16286d9472a32a15cef0cf937fc74ce6d5b910c97040b9547eb111fb2e1caaf2d8666c9a901bbd4aec1b23d4df732f707ba27481285b72a9a2083e5983ac28fce0eeb1debe3c3515a80490728669a7eb489acac3ea0fb7a44c2ff13b065339e54eda6d47ea9ef8363ffb34495cd34894c8dab18524c9323889769a27db465c96b95965819d23985af573389dfd837c1c237aea2bc825943df349a12b20e6ac5b62f8f4c822f3703a373eff2a4eb3d86eb6704dad95e9a3fb59ff2fec8c2c14476d72e8183a32b6a253e47bb3402acf237cd431e0c36876e9141b63a38129a1ff0089a19eed87822c7e95f589917a0e209bfef5ca6916c147892b6eb5931b74bde1ad5b71327f7c4b0b7d8b54564d05cc6d08a25d64b2cb3656390896ef57076189d46a2d98ac2d418d7c86070738ff5fd95f13e9f479895e95c901ee8192f9e8159bed92b3f2ca8af944b9f1c5edcb029d1b3abd2519d38aad1743050f4a840dfcf2858cbc47e739b0bba4b11cacde437259ab84ee2f847a9a96a002e2f1547d7b90996abf8aec4224c3aa144ac229300b87500973e29c0ed8e2c58bffea5ba09fa5e9707e769d26429705fb4dcfbe484c74f53a146b4c3351550ab0c1084c28751ea5381b58bd8a8f7441524ffd1090d2f9bc20f2942ede126fb4cb54105ba1159627371eca915beade94dca1cd3fc2bd94e7274254a9e71f2c05f9a688c3bb9021974b7b5c72976e142fa42dd879de7339c1f202364a6419db74430b9f2ce5645222196448fa41b74a49e0f328f2153fe637e917d38b0675c11a641a4e97871a54f3f833600b0ac0906fe9dea0665d884535e8390ca4a13a0db21f16c048d13b0abfad604f3fa27b7caac2cc4c3169c70dbbf5dd659c55eac2b6d2cdc79fa6a9eee44b90ab6a6095ce6b8f761261c02ff011c1b622348e5a531d2dc073cf0a2ebd661e35a908341369555bf5a7d5a44b6a79d370262ad94633d21c4e77a50d22b9ccefd91c918c3e859e6794099d04f33693c9f14d814701299c2c989c83c9ea388b49549aff24515afda25ed02c8f1bffb1ef5ca30894958bf9c5b34e28a2cba26d1a1ac28ed1160e5644ad8ef77a2bdddf2d351f47dc969e00abd0421fd7416b420c24b8d8ae48859eb46dcab299b99642e581db220e6d2afddb1a9527f2aee18525609a0ff9ac7b5aabee286f3376101f5d0ef4a794362f55f305435e580ae3b67867b547b02ec562085c1c9cb5e9dd5824502b8585db74039a19c3bdcb3e212b5491fab729c270d9ce1bcd177905cdd8e8c529f9f03997bced22600a876c1d92c5b480ad2dd30444d31b8b765c25596a9b281933a55b667e549689a5c296d0f7261b576feb94fae4feb91ccb2766de4eab0f5d873c22de888158f88708a59c914354ed9fb60aab4dd6eec1dc8f514a41ff3be0a9c80716e6fd8cba80cc3505702065f9c94b2bab87378571967527b0ec71856705e02620cf174ce9a77c88d115ea75e2a9d740e7e040a8e0d2e2c0fd8c44a05396fb1e0d50e2d4c96bd82fd0dd51a023370ced01f79fa84a67e5879618c78a0a711f25a264f134a1e3ff651d5b8aa9819c15a855d373db7f21d181ccd5b8beb229619b93086da78901f1180bf6bc7d4a7d3cd0156506c30be8fda1761a43282d013ceaecd4f40cb35431cdf9b60c58c024ba9099818b9d88cd92cca205cbd25931e73b85235ba3646ca156e506caea67bbbf2206293aa0d7e36cc052c6c49ba7bd4abe5bddb2b648c365165b29df5679ce2cfa8e6e0e93cac8a708b75e4775896bea0927d90e4aaddbfb4cc75887a83424bd316c62ec95625ecc36aed8e05680c31f7efdb7c5bf3a7eb93ee4a0c58e26f33465b4885310e9feaaa32c9b07380739baf0ed0488ed2caacd2b4c46d0ef9f77e8561bbfafc3015887c7e1c029f4a8b7dc98d6c7baddd0fd3397e4a0239a08db971d7bf702702c1c1fdd343a80a9f15e22a3a901a3c5eb46633cd3d90a71875061e72a5776385a22bb975ae178979f58ea67cdf07fabfafe87df26ab7aed2826ada83588c32c7be6ca51ed56c50100545ae9e69c86deebe0d876732a7d812a0950bc9d9d8f78401a468ebf1966e67fed873335a0330e5e93119dfba768bf52d17fbb8819e97fddb1d922ef33eef9407a07b4b77b807e9e4234c49b8d12d812a73eee5e0ae499c109f154a7528090dbe97023afb109664b24f59d2dc4f447b66c681a63ec60e27a61d5977d9fa02315531612fe35e15b97e29437347fefe4c7bd44663ec3f35ac9bc0c076d4b82c189578eff3d094c5a43cd8d9d48122623cde3e378101e5d2c745614e48466359a9ff8f1b7dc9343fc2798a4e0e31eb07353c8af0a93f9aa84a8de1760b918795e08826e7f380d2c4fa422429c64bc91abdeac35ec6f5da8ca03d0861de7fe25856e374c400d36cd65007b4bd7ad67f0469d160cb0bd6a7805f0bd62a55c2bd92faa8ba4f3c4fb35087a312242756b86a153acbdac983c634ee75c3497a84edf95b08fbc5c908c269cc41f8fc2e8fb9cbf2e0b0aa1463319194c211ed6ca576f7c0a09d2c411a9ae48f67260e65b624ce84c8b0b864cea61d149b7f55863e260abf4f12ab3e826a2b9b5df7830b15ce629e1325da4710cd9ac144eeb5b957be57950a1c66c3f4d0ea126b4f8c36fe4e3b6f64698eb6229aeaeb900042c762868b6e6dd62d13fe5cd87ab3d85099549e45c8dd46eb6303fb42dfac24bc18bfa46c7ad1ec98c0f2ce6d73f660963b799f818d5e0e87a2ed7d03d983bfa345c9ea14a53ab451ca41a3b79c747787ace1b883e50f554c8471fb6f981104880122e11f1a4bfc9b5b25120535c63ea367e56ad60801c72cf4b4b339f2b35d87d33fe03260a3e047b9d17d85e4d7f3b6b43232bf7bc5e27f1e553a892839e616d19adfc9d1388e4f13dcd11f4fa14a7820147e889856ab670619121ee634cf11fffb258bcc5c3be41267fe8c0646b55e0ffcca1b37d74bca2ddd196807b8f026764a0563693e8e70520018b67fe490386d8a85408109f90146723d6dfab2809a025e085cf90766a389c6b8fe9c3aead21f16a701f235ef7d6cd90d847f980c50299456d09bfa3e75cfc218b4c108ef970317bef1e74f17508400277a0833b7d76af3a6b817054e025836b32140b25c9324682b27f3e4723653b0146afcfdc3bfce103b6282752ad216b8b1bde9226013b9ed2a175ba43ca5dbf5ce5d93173d4a35ef7b4a5f2ee8baadc778ad7b17dc24d29d599d1c2402a73c945e1ec3ed39d135968a89a3f08ae3528b2c8a91ddf761ed519f489b31049925ba5d312b26cc9f3bdea6783152a6e7b7ba699ac2f859f767b7663bc698360567d89ced01ca8f30e3fdf62523329d15d3f047e6a9ffb51fb53015f7431ae8a3d48392ac7990d2fddee38146e01f353a1ce157cdd520c0e651262c8c24aabfca712fe3cc9a1b8f71114620665104e12dffd705a9e2771b1865f8f6f5e3c1d486869c5ddaf9b0bda9efc26e53fb04b5da4455ea3ae658bfedd5b92e151c80930524f2209eb240f523f6aaf39a95c9128535b088") r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vfio/vfio\x00', 0x80000, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000002c0)) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) r2 = geteuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000000480)=0xe8) write$P9_RSTATu(r1, &(0x7f0000001540)={0x64, 0x7d, 0x2, {{0x0, 0x4f, 0x7f, 0xffff, {0x1c, 0x4, 0x4}, 0x80000, 0x9, 0x9, 0x8001, 0x0, '', 0xa, '/dev/rtc0\x00', 0xf, '/dev/vfio/vfio\x00', 0x3, '%${'}, 0x0, '', r2, r3, r4}}, 0x64) flock(r0, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x4c) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000, 0xffffffffffffff9c}) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000200)={r6, 0x80000, r7}) setsockopt$RDS_CANCEL_SENT_TO(r7, 0x114, 0x1, &(0x7f0000000240)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x1) 15:30:29 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:29 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:29 executing program 3: openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x4000) r0 = mq_open(&(0x7f0000000100)='/dev/snd/seq\x00', 0x80, 0x2, &(0x7f0000000140)={0x1, 0x1, 0x6, 0x3, 0x2, 0x3, 0x67, 0x7}) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) socketpair(0xb, 0x0, 0x30, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x0, 0x7, 0x0, 0x2, 0x9, 0x101, 0x6, 0x40, 0x8, 0x5, 0x745c, 0x4, 0x3ff, 0x6, 0x10, 0x4}}) r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:29 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCSBRK(r1, 0x5427) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000380)={'veth1_to_bridge\x00', 0x400}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0xd35, @empty, 0xffffffffffffa137}}, [0x5, 0xfe9, 0x5, 0x7fff, 0xfffffffffffffff7, 0x6, 0x6, 0x3, 0x6, 0x4, 0xfffffffffffff285, 0x7fffffff, 0x9, 0x5, 0x5]}, &(0x7f0000000140)=0x100) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}}}, 0x84) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) shutdown(r1, 0x0) 15:30:30 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x200, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000100)) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) finit_module(r2, &(0x7f0000000040)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x3) r3 = dup2(r2, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:30 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:30 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000040)) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:30 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:30 executing program 4: setpriority(0xfffffffffffffffc, 0x0, 0x9) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x0, 0x1, 0x8}) mq_timedsend(r0, 0x0, 0xffffffffffffff47, 0x0, 0x0) 15:30:30 executing program 1: r0 = socket$inet(0x2, 0x7, 0x10000000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_proto_private(r1, 0x89e3, &(0x7f0000000100)="425b35a1b21075d24814712de5932ac67870ce37d14ee8ea85674f96eade0fa8e91917e2b588d3e1610f912071103ddc094f23b135e6e2735ad5ec8b3c981db079c21f79229eace8bd5e926fe21995ac4dfa") bind$inet(r1, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e22, @loopback}, 0xffffffffffffff55) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0), 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000407ffe, 0x80000000}, 0x14) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x40000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) shutdown(r1, 0x1) setsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f00000001c0)="ddd6ce071a6345d1b8d59d6c42733df6bdc9c2355b9c997848b178911f66f6aace5ebdb5a2805d9c6401858adcb2a2ff52ffe80c17f253c377629e791c1506aa184acd6d9287c60fb5bae30f922f23dea5509806ad4d44e8796a39d3dc4e954dafa88bd8680e235b5b04fee9b1b1465564ec167f43438a70e65f20b2d303c5cdaec9bf6b560393a4fee44b45aadadc17e8fa0bc434f9a0d19a81aa07a2fd9301e1f9fe4bfab1c5897eb47a6ef5cf3d79068c681e46b20d", 0xb7) 15:30:30 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f00000000c0)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:30:30 executing program 3: openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x4000) r0 = mq_open(&(0x7f0000000100)='/dev/snd/seq\x00', 0x80, 0x2, &(0x7f0000000140)={0x1, 0x1, 0x6, 0x3, 0x2, 0x3, 0x67, 0x7}) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) socketpair(0xb, 0x0, 0x30, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x0, 0x7, 0x0, 0x2, 0x9, 0x101, 0x6, 0x40, 0x8, 0x5, 0x745c, 0x4, 0x3ff, 0x6, 0x10, 0x4}}) r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:30 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000080)="6d74358f0e3ff457c62c9ea3a318e32e", 0x10, r1) clone(0x402, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) keyctl$read(0x11, r2, &(0x7f0000000f00)=""/4096, 0x100000264) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xffff, 0x500b7b23dca0a2fa) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000000180)="e4f830fec8731a8348169baa185f558f8e376c445519dceec46fc3e2d00c6ebd61cda824a39641f27df09d65cbdb50dbef42e602f849bc14be992fedfbf434674c3410e900b731c5963f246d565dc6a562da625d4fb7371e3c78e72b3dede2a82bc71c856c64afa82afdfa5f65f7311b0b8084c7ba083bb4d87c9affb052f2f0250b002ddbcdd8c4feda7b6bfc00c50fd6421bc5d571847195a16593aa2aba1783c31d4d4ab42e222878d693fc082e206ecee29d34314986f847ae30b0c1") 15:30:30 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x5) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) epoll_create1(0x80000) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:30 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) shutdown(r0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x1) 15:30:30 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x10, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) accept$inet(r2, &(0x7f0000000100)={0x2, 0x0, @empty}, &(0x7f0000000140)=0x10) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000080)={0x0, 0x13, 0x1, 0x2, "370150f05f32c40a5254d43540cae6a6bc07a5fe81b11dce376f936a7c4a6418"}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000040)={0x8, 0x1, 0x6, 0x1, 'syz1\x00', 0x6}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:30 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r2, 0x20}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x1) 15:30:31 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x10}, @remote, @loopback}, 0xc) 15:30:31 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:31 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) signalfd(r0, &(0x7f0000000080)={0x4}, 0x8) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r4, 0x4, 0x800) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) splice(r4, 0x0, r3, 0x0, 0x11000, 0x0) r5 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e25, @remote}, 0xfffffffffffffedd) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x1) 15:30:31 executing program 4: syz_open_dev$sndtimer(&(0x7f0000001040)='/dev/snd/timer\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) close(r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 15:30:31 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = dup3(r0, r0, 0x80000) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000480)="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") setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:30:31 executing program 3: openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x4000) r0 = mq_open(&(0x7f0000000100)='/dev/snd/seq\x00', 0x80, 0x2, &(0x7f0000000140)={0x1, 0x1, 0x6, 0x3, 0x2, 0x3, 0x67, 0x7}) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) socketpair(0xb, 0x0, 0x30, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x0, 0x7, 0x0, 0x2, 0x9, 0x101, 0x6, 0x40, 0x8, 0x5, 0x745c, 0x4, 0x3ff, 0x6, 0x10, 0x4}}) r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:31 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:31 executing program 4: setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000080)=0x2a, 0x4) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) fcntl$getown(r1, 0x9) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) r2 = getpgrp(0x0) r3 = syz_open_procfs(r2, 0x0) timer_create(0x4, &(0x7f0000000000)={0x0, 0x33, 0x5}, &(0x7f0000000040)=0x0) timer_gettime(r4, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bic\x00', 0x4) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r5, 0x5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_THP_DISABLE(0x29, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r3, 0x770a, 0x0) io_setup(0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x110020, 0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x1f4, @empty}}, 0x0, 0x2000000000000, 0x0, 0x0, 0x54}, 0x98) 15:30:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000100)={{0x2, 0x4e23, @loopback}, {0x7, @broadcast}, 0x4, {0x2, 0x4e24, @multicast1}, 'tunl0\x00'}) shutdown(r0, 0x1) 15:30:31 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/7, 0x7) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000140)={0x0, 0x107000}) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000000)=[0xee00, 0x0, 0xffffffffffffffff]) write$P9_RGETATTR(r2, &(0x7f0000000400)={0xa0, 0x19, 0x1, {0x1, {0x2, 0x4, 0x5}, 0x21, r3, r4, 0x100, 0x100, 0x0, 0xfffffffffffffffc, 0x2, 0x4, 0x7, 0x2, 0x7f, 0xe27, 0x6, 0x4, 0x36, 0x800, 0x7ff}}, 0xa0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0x30) 15:30:31 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:31 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000028bd7000ffdbf32508000000"], 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000100)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00') r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x5}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0x2, 0x1, 0xe46a, 0x0, r2}, &(0x7f0000000280)=0x10) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x8, 0x420000) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x1) 15:30:32 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3300000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:32 executing program 3: openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x4000) r0 = mq_open(&(0x7f0000000100)='/dev/snd/seq\x00', 0x80, 0x2, &(0x7f0000000140)={0x1, 0x1, 0x6, 0x3, 0x2, 0x3, 0x67, 0x7}) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) socketpair(0xb, 0x0, 0x30, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x0, 0x7, 0x0, 0x2, 0x9, 0x101, 0x6, 0x40, 0x8, 0x5, 0x745c, 0x4, 0x3ff, 0x6, 0x10, 0x4}}) r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:32 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="55cd0477000028bd7000ffdbdf25cf85f95cfa4071da3aef1ec7e260eefb47ccf436c3a2cda1206d503a4d3e1a65e1a85821d5a16126b547035cb67033b4d2a20dbe675f758b47b6f0ff425dd0d57d990f65ce2b4b2233bfbd7ccd7ff946e918d682077e281909ee0aef404e98b68d23699414b53ac1398881c2d6f28599049a1bf013148a878363f77d0fb4d2aeda572bd968da9cad713fe152d04a421b30ee6faaecd733bfc77ba0ec857b86613c11f7f26e90a76445b0eddd7e66717925119c137646b9b404365f2b6975bdd81535f2bd5df48d9d55a3cd8d58b662b9d9f89915f1ecbfd39a4ed9f548"], 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000abe000)}, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x32, 0x2, @thr={&(0x7f0000000140)="b91bedf26534f1944f2e73d2229b12fcf5938af29d735075dfd95c", &(0x7f0000000480)="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"}}, &(0x7f0000000240)=0x0) ioctl$FICLONE(r1, 0x40049409, r1) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f00000002c0)={{r5, r6+10000000}, {0x77359400}}, &(0x7f0000000300)) sendto$inet(r3, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) write$P9_RRENAME(r2, &(0x7f0000000100)={0x7, 0x15, 0x1}, 0x7) sendto$inet(r3, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000040)) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:30:32 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0xfffffffffffffffd}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000017, &(0x7f0000000080)=0x1, 0xffffffffffffff95) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x1) 15:30:32 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:32 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) signalfd(r0, &(0x7f0000000080)={0x4}, 0x8) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r4, 0x4, 0x800) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) splice(r4, 0x0, r3, 0x0, 0x11000, 0x0) r5 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:32 executing program 3: openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x4000) r0 = mq_open(&(0x7f0000000100)='/dev/snd/seq\x00', 0x80, 0x2, &(0x7f0000000140)={0x1, 0x1, 0x6, 0x3, 0x2, 0x3, 0x67, 0x7}) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) socketpair(0xb, 0x0, 0x30, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x0, 0x7, 0x0, 0x2, 0x9, 0x101, 0x6, 0x40, 0x8, 0x5, 0x745c, 0x4, 0x3ff, 0x6, 0x10, 0x4}}) r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:32 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:32 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5800000000000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x12}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x9c, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x100}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) 15:30:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x1) 15:30:32 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x53c, 0x20000) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000240)) setsockopt$inet_dccp_int(r0, 0x21, 0xb, &(0x7f0000000080)=0x4940, 0x4) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x6, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x1}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000001c0)={r3, 0xfff}, &(0x7f0000000200)=0x8) 15:30:32 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @multicast1}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000200)={r2, 0x5}, &(0x7f0000000240)=0x8) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x4b, 0x80000001}, @window={0x3, 0xffffffffffffffff, 0xffffffffffffff92}, @mss={0x2, 0xfe96}, @mss={0x2, 0x1}, @timestamp, @mss={0x2, 0x101}], 0x15e) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) r3 = syz_open_dev$dmmidi(&(0x7f0000001340)='/dev/dmmidi#\x00', 0x0, 0x400) connect$rds(r1, &(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001380)={0x0, 0x1000, "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"}, &(0x7f00000023c0)=0x1008) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000002400)={r4, @in6={{0xa, 0x4e20, 0x0, @empty, 0x1f}}, 0x2, 0x1000}, 0x90) shutdown(r0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x80) 15:30:33 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000400)={0x6, &(0x7f0000000240)=""/193, &(0x7f0000001680)=[{0x200, 0x3f, 0x1, &(0x7f0000000040)=""/63}, {0xffffffffffffffff, 0x94, 0xd14b, &(0x7f0000000100)=""/148}, {0x4, 0xf9, 0x0, &(0x7f0000000480)=""/249}, {0x9b1, 0x0, 0xfe56, &(0x7f00000003c0)}, {0x1, 0x1000, 0x0, &(0x7f0000000580)=""/4096}, {0x100000001, 0xd8, 0x4, &(0x7f0000001580)=""/216}]}) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:30:33 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKTRACESTOP(r0, 0x127c, 0x70a000) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0xc00, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x900, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000440)={0x4000000a}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x1dc, r4, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffffa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}]}, @TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MEDIA={0xf4, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xae}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2984}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4f8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x413}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x40041}, 0x800) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x121201, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) 15:30:33 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000000089427680f3e596fc105cbd31ddd448fe8bfe3bff72c7cbac0a076e01e8165b610bdad9aab54590e3f42f4cff036efbb3982819d1f086d9884b30a1da386921ddf6f6f0359056aff03c52c4b8cb669b849e96430a5770ec16f4b77873b816cee0758aaa14443ff9837abae7c35ed8b00b1a269617ff1942782ae51aaf191091ada104000000000000000000000000000000", @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRESDEC], @ANYBLOB="000028bd7000ffdbdf2508000000"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x440000, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000080)={0x1, 0x9, 0x75bd}) bind$vsock_stream(r0, &(0x7f0000000240)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r1, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x4, 0xffff, 0x6, 'queue0\x00', 0x8}) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000340)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x3) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000100)={0x2, 0x8}, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) prctl$PR_CAPBSET_READ(0x17, 0xb) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) r4 = semget(0x3, 0x0, 0x480) ioctl$KVM_NMI(r0, 0xae9a) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000180)=[0x1, 0xffffffffffffffca, 0x9, 0x9, 0xfffffffffffffffe, 0x4]) 15:30:33 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0x6) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x202, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x40000007ffe, 0x80000000, 0x0, 0xffffffffffffffff}, 0x14) shutdown(r0, 0x1) 15:30:33 executing program 3: openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x4000) r0 = mq_open(&(0x7f0000000100)='/dev/snd/seq\x00', 0x80, 0x2, &(0x7f0000000140)={0x1, 0x1, 0x6, 0x3, 0x2, 0x3, 0x67, 0x7}) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) socketpair(0xb, 0x0, 0x30, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x0, 0x7, 0x0, 0x2, 0x9, 0x101, 0x6, 0x40, 0x8, 0x5, 0x745c, 0x4, 0x3ff, 0x6, 0x10, 0x4}}) r3 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r4 = dup2(r3, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:33 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x200, 0x0) r0 = inotify_init1(0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) lseek(0xffffffffffffffff, 0x0, 0x5) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080), &(0x7f0000000440)=0x14) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380)) setresgid(r4, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) ioctl$int_in(r0, 0x5473, &(0x7f0000000400)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:30:33 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) r1 = accept4(r0, &(0x7f0000000100), &(0x7f00000001c0)=0x80, 0x80000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000200)=0x8, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x1) 15:30:33 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:33 executing program 3: openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x4000) r0 = mq_open(&(0x7f0000000100)='/dev/snd/seq\x00', 0x80, 0x2, &(0x7f0000000140)={0x1, 0x1, 0x6, 0x3, 0x2, 0x3, 0x67, 0x7}) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) socketpair(0xb, 0x0, 0x30, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x0, 0x7, 0x0, 0x2, 0x9, 0x101, 0x6, 0x40, 0x8, 0x5, 0x745c, 0x4, 0x3ff, 0x6, 0x10, 0x4}}) r3 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r4 = dup2(r3, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:33 executing program 3: openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x4000) r0 = mq_open(&(0x7f0000000100)='/dev/snd/seq\x00', 0x80, 0x2, &(0x7f0000000140)={0x1, 0x1, 0x6, 0x3, 0x2, 0x3, 0x67, 0x7}) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) socketpair(0xb, 0x0, 0x30, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x0, 0x7, 0x0, 0x2, 0x9, 0x101, 0x6, 0x40, 0x8, 0x5, 0x745c, 0x4, 0x3ff, 0x6, 0x10, 0x4}}) r3 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r4 = dup2(r3, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:33 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:34 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 15:30:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) getsockname$inet(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, &(0x7f0000000140)=0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x1) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x1, 0x0) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000200)=0x39) 15:30:34 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:34 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000080), 0x4) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000400)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) getgroups(0x9, &(0x7f0000000500)=[0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0x0, 0xee00, 0xee00, 0xee00, 0xffffffffffffffff]) fstat(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000680)=[0x0]) r11 = getgid() fstat(r1, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getegid() fsetxattr$system_posix_acl(r3, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000007c0)={{}, {0x1, 0x2}, [{0x2, 0x4, r4}, {0x2, 0x6, r5}], {0x4, 0x5}, [{0x8, 0x4, r6}, {0x8, 0x1, r7}, {0x8, 0x0, r8}, {0x8, 0x2, r9}, {0x8, 0x6, r10}, {0x8, 0x5, r11}, {0x8, 0x6, r12}, {0x8, 0x2, r13}], {0x10, 0x5}, {0x20, 0x3}}, 0x74, 0x2) 15:30:34 executing program 3: openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x4000) r0 = mq_open(&(0x7f0000000100)='/dev/snd/seq\x00', 0x80, 0x2, &(0x7f0000000140)={0x1, 0x1, 0x6, 0x3, 0x2, 0x3, 0x67, 0x7}) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) socketpair(0xb, 0x0, 0x30, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:34 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x100000000000000, 0x4000) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000080)={0xf, {0x0, 0x800, 0x9, 0x9}}) r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 2134.641999] cgroup: fork rejected by pids controller in /syz4 15:30:34 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x200, 0x0) r0 = inotify_init1(0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) lseek(0xffffffffffffffff, 0x0, 0x5) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080), &(0x7f0000000440)=0x14) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380)) setresgid(r4, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) ioctl$int_in(r0, 0x5473, &(0x7f0000000400)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:30:34 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000000280)=""/205, 0xcd}, {&(0x7f0000000380)=""/55, 0x37}, {&(0x7f00000003c0)=""/219, 0xdb}, {&(0x7f0000000540)=""/87, 0x57}], 0x5, &(0x7f0000000640)=""/111, 0x6f}, 0x2162) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000006c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000700)=0x18) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x1) 15:30:34 executing program 3: openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x4000) r0 = mq_open(&(0x7f0000000100)='/dev/snd/seq\x00', 0x80, 0x2, &(0x7f0000000140)={0x1, 0x1, 0x6, 0x3, 0x2, 0x3, 0x67, 0x7}) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) socketpair(0xb, 0x0, 0x30, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:34 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x10000018143c) r2 = dup2(r1, r0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x10, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x7000, 0x110000}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f00000001c0)) 15:30:34 executing program 3: openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x4000) r0 = mq_open(&(0x7f0000000100)='/dev/snd/seq\x00', 0x80, 0x2, &(0x7f0000000140)={0x1, 0x1, 0x6, 0x3, 0x2, 0x3, 0x67, 0x7}) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) socketpair(0xb, 0x0, 0x30, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:35 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x8e8f, 0x82000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000440)="afba03a6263db5d01036d46e134f4b981d7b9bb5955cb0bafb87", 0x1a, 0x4000010, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)="df", 0x1, 0x6200010, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0xfffffc5c) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) 15:30:35 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x400, 0x8080) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000001c0)={0x5, 0x0, [{0x8000000f, 0x6, 0xff, 0x64e40801, 0x91a}, {0x0, 0x7, 0x3bff6bd8, 0x3, 0x3}, {0x80000008, 0x6f0, 0xffffffffffff8000, 0x9, 0x3}, {0xc0000001, 0xc2, 0x7, 0x0, 0x400}, {0xb, 0x7ff, 0x9, 0xfff, 0x1}]}) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x3f2) shutdown(r0, 0x1) 15:30:35 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x461a, 0x44000) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000080)='syz1\x00') r2 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r3 = dup2(r2, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:35 executing program 3: openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x4000) mq_open(&(0x7f0000000100)='/dev/snd/seq\x00', 0x80, 0x2, &(0x7f0000000140)={0x1, 0x1, 0x6, 0x3, 0x2, 0x3, 0x67, 0x7}) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) socketpair(0xb, 0x0, 0x30, &(0x7f0000000400)) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x0, 0x7, 0x0, 0x2, 0x9, 0x101, 0x6, 0x40, 0x8, 0x5, 0x745c, 0x4, 0x3ff, 0x6, 0x10, 0x4}}) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:35 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:35 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x200, 0x0) r0 = inotify_init1(0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) lseek(0xffffffffffffffff, 0x0, 0x5) write(r2, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080), &(0x7f0000000440)=0x14) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380)) setresgid(r4, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) ioctl$int_in(r0, 0x5473, &(0x7f0000000400)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15:30:35 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:35 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x440, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000001c0)={0x8001, 0x2, {0x1, 0x2, 0x1, 0x2, 0xa15}}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) r3 = getpid() tgkill(r2, r3, 0x26) 15:30:35 executing program 3: openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x4000) mq_open(&(0x7f0000000100)='/dev/snd/seq\x00', 0x80, 0x2, &(0x7f0000000140)={0x1, 0x1, 0x6, 0x3, 0x2, 0x3, 0x67, 0x7}) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) socketpair(0xb, 0x0, 0x30, &(0x7f0000000400)) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x0, 0x7, 0x0, 0x2, 0x9, 0x101, 0x6, 0x40, 0x8, 0x5, 0x745c, 0x4, 0x3ff, 0x6, 0x10, 0x4}}) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:35 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000228bd7000ffdbdf2508000000"], 0xfd6d}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000008280)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000008380)=0xe8) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000400)="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") setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000083c0)={r3, @multicast2, @rand_addr=0x1}, 0xc) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000100)={0x6, 0x3, 0x4, {0x77359400}, 0x6, 0x7f}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:35 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x80, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000540)="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", 0x1000) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000140)=""/59) shutdown(r0, 0x1) 15:30:36 executing program 3: openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x4000) mq_open(&(0x7f0000000100)='/dev/snd/seq\x00', 0x80, 0x2, &(0x7f0000000140)={0x1, 0x1, 0x6, 0x3, 0x2, 0x3, 0x67, 0x7}) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) socketpair(0xb, 0x0, 0x30, &(0x7f0000000400)) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x0, 0x7, 0x0, 0x2, 0x9, 0x101, 0x6, 0x40, 0x8, 0x5, 0x745c, 0x4, 0x3ff, 0x6, 0x10, 0x4}}) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:36 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000000)) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000}) 15:30:36 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:36 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRESDEC, @ANYRES64], 0x3}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000080)=0x78) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x74e, 0x6}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000400)={r2, 0x7a, "8cee75165144922d33855f008e7881147fdb158bc1740230ed1a7f9e9aa2dbca023c10eac2b2ddd17d4d53f57455d9e98de9e35900b5797b7d52a2480cb8558261223e37528fac0c8a00b574aee30f5628d105482e892cb3efb97b33d8a6c2ed38a134e8314102e66e23d46885780e6a4da86752f02918f9f4ae"}, &(0x7f0000000240)=0x82) r3 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r4 = dup2(r3, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x2000000000000002, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x1) 15:30:36 executing program 4: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c560a06", 0x12}], 0x1) close(r0) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000000)={0x0, 0x397}, 0x2) 15:30:36 executing program 3: openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x4000) mq_open(&(0x7f0000000100)='/dev/snd/seq\x00', 0x80, 0x2, &(0x7f0000000140)={0x1, 0x1, 0x6, 0x3, 0x2, 0x3, 0x67, 0x7}) syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x0, 0x7, 0x0, 0x2, 0x9, 0x101, 0x6, 0x40, 0x8, 0x5, 0x745c, 0x4, 0x3ff, 0x6, 0x10, 0x4}}) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:36 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:36 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="00000000d368bcdc65d45027921ef1cf3c3b70d984671b0c10a1ec59ac71abb11fc24eb321ad386562bdec4e3604e5eecf58aaefb5eb3b12b245e7dcca5b1ed88c099c1f16", @ANYRES16=0x0, @ANYBLOB="000028bd7000ffdbdf2508000000"], 0x14}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:36 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000002c0)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0xb, "ee45a31cf97e0aab6af0f7"}, &(0x7f00000000c0)=0x13) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2, 0x4, 0x0, 0x7}, 0x10) 15:30:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x1c040, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000140), 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x1) 15:30:36 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000080)={&(0x7f0000000040)}, 0x6, &(0x7f0000000140)={&(0x7f0000000100)}}, 0x18) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ubi_ctrl\x00', 0x101c00, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e24, @rand_addr=0xd1}}, 0x4703, 0x2, 0x6, 0xfffffffffffffffa, 0x40}, &(0x7f0000000600)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000640)={r2, 0x3}, &(0x7f0000000680)=0x8) r3 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r4 = dup2(r3, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f0000000200)={0x9, 0x20000000000, 0xff, 0x3f, 0x101, 0x1f}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1f, 0x5, 0xf89, 0x7, 0x20}, &(0x7f0000000340)=0x98) setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000004c0)={r5, 0x569}, 0x8) 15:30:36 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:36 executing program 3: openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x4000) mq_open(&(0x7f0000000100)='/dev/snd/seq\x00', 0x80, 0x2, &(0x7f0000000140)={0x1, 0x1, 0x6, 0x3, 0x2, 0x3, 0x67, 0x7}) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x0, 0x7, 0x0, 0x2, 0x9, 0x101, 0x6, 0x40, 0x8, 0x5, 0x745c, 0x4, 0x3ff, 0x6, 0x10, 0x4}}) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000400)='/dev/dri/card#\x00', 0xc72f, 0x0) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)="ec603271334d77c16f0f0ead01eca33d93733df111d4cc388676f1d619e48df6caa32a250f4e090d1ed3cf4082d9c9ae060221b2a352e2ed4e0563dd103584f389c618672f1fe6307c6a8bddbd7ee28ee8b96b9c21afde97af41e86fa43f60416b5ff99dba1cd999968dd8bd6beea4b2b3b5767cf91431003b1c", 0x4a}, {&(0x7f0000000280)="465411259f7d14fe93be4830ec71d52857a704a3834e2a64", 0x18}], 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, 0x200000000001f, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f00000000c0)={0x4, &(0x7f0000000040)="7bae23d6cdd53d075ec36d07465299d261381b5158ff48a921ed223027135c78750f0055405bd8a84c7ef39ef4537d8d5ec1c5042199fda33ee174d6f15b49442d8e7d82acfba38041f186ddf4da200251b290edb0"}) 15:30:36 executing program 4: r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff8e) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) readahead(r0, 0x4, 0x1f) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file1\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x0, 0x111000) [ 2136.863910] INFO: trying to register non-static key. [ 2136.869047] the code is fine but needs lockdep annotation. [ 2136.874666] turning off the locking correctness validator. [ 2136.880299] CPU: 0 PID: 8939 Comm: syz-executor.2 Not tainted 5.0.0+ #8 [ 2136.887046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2136.896421] Call Trace: [ 2136.899020] dump_stack+0x172/0x1f0 [ 2136.902660] register_lock_class+0x1bdc/0x1bf0 [ 2136.907245] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2136.912270] ? bpf_prog_kallsyms_find+0x50/0x2c0 [ 2136.917024] ? check_noncircular+0x20/0x20 [ 2136.921263] ? is_bpf_text_address+0xd3/0x170 [ 2136.925763] ? kernel_text_address+0x73/0xf0 [ 2136.930180] __lock_acquire+0x11f/0x4700 [ 2136.934248] ? check_noncircular+0x20/0x20 [ 2136.938517] ? mark_held_locks+0x100/0x100 [ 2136.942756] ? __lock_acquire+0x53b/0x4700 [ 2136.946988] ? __lock_acquire+0x53b/0x4700 [ 2136.951230] ? __lock_acquire+0x53b/0x4700 [ 2136.955491] lock_acquire+0x16f/0x3f0 [ 2136.959297] ? __flush_work+0x61a/0x840 15:30:36 executing program 5: setxattr$security_capability(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.capability\x00', 0x0, 0x0, 0x2) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000180)) r0 = fcntl$getown(0xffffffffffffff9c, 0x9) r1 = socket$isdn_base(0x22, 0x3, 0x0) r2 = socket$inet6(0xa, 0x801, 0x5) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) r5 = syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x7, 0x80000) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000b00)=ANY=[@ANYBLOB="08000000000000001f000000000000000500000000000000", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="00000000018000000000000000000000000000000000000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000000000000000000000000000000000000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00J\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="4006000000000000cc990000000000000000003a244f1c667cabcc1cdfa600f3928a60aba78af62d61e94bd1e7f09dd4d4303927e70b0f1035ab3c4d0df06ae273e31e20ab35054e8866704ed71c4727b74ff51055b6f9137d4a91a8de67ceceab8761f2d3b52eec4ccfd25943e856d90443b23688a4182fd61da107b62944c81196c1271e8593b0ead87a61708d53b1c2441ebdf13073629388ca5e4409cd4870a4f8d6ec355c47d5e1"]) r7 = syz_open_dev$cec(&(0x7f00000004c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$KVM_CHECK_EXTENSION_VM(r7, 0xae03, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, &(0x7f0000000380)=""/93) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x0) getresuid(0x0, 0x0, &(0x7f00000001c0)) socket$xdp(0x2c, 0x3, 0x0) r8 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_STD(r8, 0x80085617, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000a80)='keyring]\x00'}, 0x30) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0x0) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000540)={[0x0, 0x1, 0x8, 0x4, 0x1ff, 0x3, 0x39aa, 0x1, 0x400, 0x2, 0x8, 0x101, 0x100000000, 0x100, 0xc8b3c02, 0x100000001], 0x3000, 0x40200}) prctl$PR_CAPBSET_READ(0x17, 0x1e) ioctl$EVIOCGBITSW(r9, 0x80404525, &(0x7f0000000240)=""/114) unshare(0x40000000) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r9, 0xc0305615, &(0x7f00000000c0)={0x0, {0x1}}) syz_open_dev$loop(0x0, 0x100000001, 0x0) 15:30:36 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x400, 0x0) r1 = socket$inet(0x2, 0x80000, 0xffff) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000140)=0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000001c0)={0x0, 0x40000007ffe, 0x80000000, 0x8000, 0x8001}, 0x14) shutdown(r0, 0x1) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6f) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video35\x00', 0x2, 0x0) 15:30:36 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2136.963275] __flush_work+0x640/0x840 [ 2136.967080] ? __flush_work+0x61a/0x840 [ 2136.971062] ? try_wait_for_completion+0x9a/0xd0 [ 2136.971317] kobject: 'loop1' (0000000081728edf): kobject_uevent_env [ 2136.975820] ? insert_work+0x3a0/0x3a0 [ 2136.986091] ? mark_held_locks+0xb1/0x100 [ 2136.987909] kobject: 'loop1' (0000000081728edf): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2136.990238] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2136.990256] ? refcount_sub_and_test_checked+0x161/0x1f0 [ 2136.990270] ? refcount_inc_checked+0x70/0x70 [ 2136.990288] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 2137.020618] ? __drm_atomic_helper_crtc_destroy_state+0xf3/0x340 [ 2137.026771] flush_work+0x18/0x20 [ 2137.028221] kobject: 'loop0' (00000000e1a16639): kobject_uevent_env [ 2137.030229] vkms_atomic_crtc_destroy_state+0x2d/0x40 [ 2137.030247] drm_atomic_state_default_clear+0x37c/0xd60 [ 2137.030265] drm_atomic_state_clear+0x9d/0xc0 [ 2137.042670] kobject: 'loop0' (00000000e1a16639): fill_kobj_path: path = '/devices/virtual/block/loop0' 15:30:37 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3300], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2137.047188] __drm_atomic_state_free+0x3c/0xf0 [ 2137.047204] drm_atomic_helper_set_config+0xe5/0x160 [ 2137.047220] drm_mode_setcrtc+0x613/0x1490 [ 2137.053631] kobject: 'loop5' (000000002f6317bf): kobject_uevent_env [ 2137.061140] ? drm_mode_getcrtc+0x870/0x870 [ 2137.061158] ? drm_dev_exit+0x22/0x60 [ 2137.061171] ? find_held_lock+0x35/0x130 [ 2137.061185] ? drm_dev_exit+0x22/0x60 [ 2137.061201] ? drm_lease_owner+0x45/0x60 [ 2137.061215] ? drm_is_current_master+0x5c/0x140 [ 2137.061231] drm_ioctl_kernel+0x23b/0x2e0 [ 2137.061246] ? drm_mode_getcrtc+0x870/0x870 [ 2137.099386] kobject: 'loop5' (000000002f6317bf): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2137.101611] ? drm_setversion+0x8c0/0x8c0 [ 2137.101627] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2137.101647] ? _copy_from_user+0xdd/0x150 [ 2137.115716] IPVS: ftp: loaded support on port[0] = 21 [ 2137.124168] drm_ioctl+0x545/0xa50 [ 2137.124181] ? drm_mode_getcrtc+0x870/0x870 [ 2137.124197] ? drm_version+0x3d0/0x3d0 [ 2137.124216] ? __fget+0x340/0x540 [ 2137.124230] ? drm_version+0x3d0/0x3d0 [ 2137.124244] do_vfs_ioctl+0xd6e/0x1390 [ 2137.124261] ? ioctl_preallocate+0x210/0x210 [ 2137.124275] ? __fget+0x367/0x540 [ 2137.132425] kobject: 'loop0' (00000000e1a16639): kobject_uevent_env [ 2137.133939] ? iterate_fd+0x360/0x360 [ 2137.133953] ? nsecs_to_jiffies+0x30/0x30 [ 2137.133972] ? security_file_ioctl+0x93/0xc0 [ 2137.133987] ksys_ioctl+0xab/0xd0 [ 2137.143056] kobject: 'loop0' (00000000e1a16639): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2137.143306] __x64_sys_ioctl+0x73/0xb0 [ 2137.209470] do_syscall_64+0x103/0x610 [ 2137.213380] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2137.215515] kobject: 'lo' (0000000041d3a2c7): kobject_add_internal: parent: 'net', set: 'devices' [ 2137.218564] RIP: 0033:0x457f29 [ 2137.218579] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2137.218586] RSP: 002b:00007f8d810a9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2137.218600] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 15:30:37 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:37 executing program 3: openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x4000) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x0, 0x7, 0x0, 0x2, 0x9, 0x101, 0x6, 0x40, 0x8, 0x5, 0x745c, 0x4, 0x3ff, 0x6, 0x10, 0x4}}) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 2137.218608] RDX: 0000000020000180 RSI: 00000000c06864a2 RDI: 0000000000000003 [ 2137.218616] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2137.218624] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8d810aa6d4 [ 2137.218631] R13: 00000000004bfc39 R14: 00000000004d16f8 R15: 00000000ffffffff [ 2137.295578] kobject: 'loop3' (00000000cecf427d): kobject_uevent_env [ 2137.303042] kobject: 'lo' (0000000041d3a2c7): kobject_uevent_env 15:30:37 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2137.313793] kobject: 'lo' (0000000041d3a2c7): fill_kobj_path: path = '/devices/virtual/net/lo' [ 2137.329576] kobject: 'queues' (000000003d7c6fc4): kobject_add_internal: parent: 'lo', set: '' [ 2137.330544] kobject: 'loop3' (00000000cecf427d): fill_kobj_path: path = '/devices/virtual/block/loop3' 15:30:37 executing program 3: openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x0, 0x7, 0x0, 0x2, 0x9, 0x101, 0x6, 0x40, 0x8, 0x5, 0x745c, 0x4, 0x3ff, 0x6, 0x10, 0x4}}) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x1) 15:30:37 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2137.361917] kobject: 'queues' (000000003d7c6fc4): kobject_uevent_env [ 2137.373759] kobject: 'loop2' (00000000418dbd4d): kobject_uevent_env [ 2137.381356] kobject: 'queues' (000000003d7c6fc4): kobject_uevent_env: filter function caused the event to drop! [ 2137.412564] kobject: 'rx-0' (00000000accb724e): kobject_add_internal: parent: 'queues', set: 'queues' [ 2137.436443] kobject: 'rx-0' (00000000accb724e): kobject_uevent_env [ 2137.438020] kobject: 'loop2' (00000000418dbd4d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2137.451499] kobject: 'rx-0' (00000000accb724e): fill_kobj_path: path = '/devices/virtual/net/lo/queues/rx-0' [ 2137.466493] kobject: 'tx-0' (0000000099126b28): kobject_add_internal: parent: 'queues', set: 'queues' [ 2137.491786] kobject: 'tx-0' (0000000099126b28): kobject_uevent_env [ 2137.498447] kobject: 'loop2' (00000000418dbd4d): kobject_uevent_env [ 2137.504235] kobject: 'tx-0' (0000000099126b28): fill_kobj_path: path = '/devices/virtual/net/lo/queues/tx-0' [ 2137.504889] kobject: 'loop2' (00000000418dbd4d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2137.505244] kobject: 'loop0' (00000000e1a16639): kobject_uevent_env [ 2137.522586] kobject: 'tunl0' (00000000ce1028fe): kobject_add_internal: parent: 'net', set: 'devices' [ 2137.555255] kobject: 'tunl0' (00000000ce1028fe): kobject_uevent_env [ 2137.565027] kobject: 'tunl0' (00000000ce1028fe): fill_kobj_path: path = '/devices/virtual/net/tunl0' [ 2137.575988] kobject: 'queues' (00000000d8cfdcc9): kobject_add_internal: parent: 'tunl0', set: '' [ 2137.578067] kobject: 'loop0' (00000000e1a16639): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2137.588815] kobject: 'queues' (00000000d8cfdcc9): kobject_uevent_env [ 2137.604436] kobject: 'queues' (00000000d8cfdcc9): kobject_uevent_env: filter function caused the event to drop! [ 2137.615940] kobject: 'rx-0' (00000000addf8a6c): kobject_add_internal: parent: 'queues', set: 'queues' [ 2137.618248] kobject: 'loop1' (0000000081728edf): kobject_uevent_env [ 2137.631793] kobject: 'loop1' (0000000081728edf): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2137.641694] kobject: 'loop2' (00000000418dbd4d): kobject_uevent_env [ 2137.648656] kobject: 'loop2' (00000000418dbd4d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2137.658433] kobject: 'rx-0' (00000000addf8a6c): kobject_uevent_env [ 2137.658552] kobject: 'loop0' (00000000e1a16639): kobject_uevent_env [ 2137.671299] kobject: 'loop0' (00000000e1a16639): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2137.681160] kobject: 'rx-0' (00000000addf8a6c): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/rx-0' [ 2137.681168] kobject: 'loop1' (0000000081728edf): kobject_uevent_env [ 2137.681460] kobject: 'tx-0' (00000000fde1894d): kobject_add_internal: parent: 'queues', set: 'queues' [ 2137.691515] kobject: 'loop1' (0000000081728edf): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2137.744484] kobject: 'tx-0' (00000000fde1894d): kobject_uevent_env [ 2137.758494] kobject: 'tx-0' (00000000fde1894d): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/tx-0' [ 2137.780428] kobject: 'gre0' (00000000cb3e34bd): kobject_add_internal: parent: 'net', set: 'devices' [ 2137.804239] kobject: 'gre0' (00000000cb3e34bd): kobject_uevent_env [ 2137.818701] kobject: 'gre0' (00000000cb3e34bd): fill_kobj_path: path = '/devices/virtual/net/gre0' [ 2137.829590] kobject: 'queues' (00000000af46ae54): kobject_add_internal: parent: 'gre0', set: '' [ 2137.842129] IPVS: ftp: loaded support on port[0] = 21 15:30:37 executing program 4: r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff8e) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) readahead(r0, 0x4, 0x1f) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file1\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x0, 0x111000) [ 2137.851470] kobject: 'queues' (00000000af46ae54): kobject_uevent_env [ 2137.858338] kobject: 'queues' (00000000af46ae54): kobject_uevent_env: filter function caused the event to drop! [ 2137.861801] kobject: 'loop4' (00000000d2aa5d9a): kobject_uevent_env [ 2137.869561] kobject: 'rx-0' (000000008b749e6f): kobject_add_internal: parent: 'queues', set: 'queues' [ 2137.883646] kobject: 'loop4' (00000000d2aa5d9a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2137.894237] kobject: 'rx-0' (000000008b749e6f): kobject_uevent_env [ 2137.896176] base_sock_release(000000004778bf8a) sk=0000000006a0d998 [ 2137.908068] kobject: 'rx-0' (000000008b749e6f): fill_kobj_path: path = '/devices/virtual/net/gre0/queues/rx-0' [ 2137.919863] kobject: 'tx-0' (00000000a9935eb6): kobject_add_internal: parent: 'queues', set: 'queues' [ 2137.930012] kobject: 'tx-0' (00000000a9935eb6): kobject_uevent_env [ 2137.930066] base_sock_release(00000000e2230516) sk=0000000010077caa [ 2137.939575] kobject: 'tx-0' (00000000a9935eb6): fill_kobj_path: path = '/devices/virtual/net/gre0/queues/tx-0' [ 2137.954060] kobject: 'gretap0' (000000004dc1d7e6): kobject_add_internal: parent: 'net', set: 'devices' [ 2137.964417] kobject: 'gretap0' (000000004dc1d7e6): kobject_uevent_env [ 2137.971396] kobject: 'gretap0' (000000004dc1d7e6): fill_kobj_path: path = '/devices/virtual/net/gretap0' [ 2137.981882] kobject: 'queues' (0000000063bfbfa9): kobject_add_internal: parent: 'gretap0', set: '' [ 2137.992282] kobject: 'queues' (0000000063bfbfa9): kobject_uevent_env [ 2138.004167] kobject: 'queues' (0000000063bfbfa9): kobject_uevent_env: filter function caused the event to drop! [ 2138.015063] kobject: 'rx-0' (0000000027a758c8): kobject_add_internal: parent: 'queues', set: 'queues' [ 2138.024935] kobject: 'rx-0' (0000000027a758c8): kobject_uevent_env [ 2138.031687] kobject: 'rx-0' (0000000027a758c8): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/rx-0' [ 2138.043004] kobject: 'tx-0' (000000009c36d696): kobject_add_internal: parent: 'queues', set: 'queues' [ 2138.052924] kobject: 'tx-0' (000000009c36d696): kobject_uevent_env [ 2138.059585] kobject: 'tx-0' (000000009c36d696): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/tx-0' [ 2138.072008] kobject: 'batman_adv' (000000001a1b0d44): kobject_add_internal: parent: 'gretap0', set: '' [ 2138.082773] kobject: 'erspan0' (00000000169ce032): kobject_add_internal: parent: 'net', set: 'devices' [ 2138.093102] kobject: 'erspan0' (00000000169ce032): kobject_uevent_env [ 2138.100221] kobject: 'erspan0' (00000000169ce032): fill_kobj_path: path = '/devices/virtual/net/erspan0' [ 2138.110216] kobject: 'queues' (00000000e09af8db): kobject_add_internal: parent: 'erspan0', set: '' [ 2138.120139] kobject: 'queues' (00000000e09af8db): kobject_uevent_env [ 2138.126747] kobject: 'queues' (00000000e09af8db): kobject_uevent_env: filter function caused the event to drop! [ 2138.137452] kobject: 'rx-0' (00000000a0d79404): kobject_add_internal: parent: 'queues', set: 'queues' [ 2138.148673] kobject: 'rx-0' (00000000a0d79404): kobject_uevent_env [ 2138.155175] kobject: 'rx-0' (00000000a0d79404): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/rx-0' [ 2138.165980] kobject: 'tx-0' (00000000e8cbfc0c): kobject_add_internal: parent: 'queues', set: 'queues' [ 2138.175771] kobject: 'tx-0' (00000000e8cbfc0c): kobject_uevent_env [ 2138.182411] kobject: 'tx-0' (00000000e8cbfc0c): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/tx-0' [ 2138.193749] kobject: 'batman_adv' (000000003448a388): kobject_add_internal: parent: 'erspan0', set: '' [ 2138.204446] kobject: 'ip_vti0' (00000000bfe7ec78): kobject_add_internal: parent: 'net', set: 'devices' [ 2138.214772] kobject: 'ip_vti0' (00000000bfe7ec78): kobject_uevent_env [ 2138.221690] kobject: 'ip_vti0' (00000000bfe7ec78): fill_kobj_path: path = '/devices/virtual/net/ip_vti0' [ 2138.231681] kobject: 'queues' (0000000060f0a22f): kobject_add_internal: parent: 'ip_vti0', set: '' [ 2138.241647] kobject: 'queues' (0000000060f0a22f): kobject_uevent_env [ 2138.248407] kobject: 'queues' (0000000060f0a22f): kobject_uevent_env: filter function caused the event to drop! [ 2138.258929] kobject: 'rx-0' (00000000b9e963bc): kobject_add_internal: parent: 'queues', set: 'queues' [ 2138.270342] kobject: 'loop4' (00000000d2aa5d9a): kobject_uevent_env [ 2138.271964] kobject: 'rx-0' (00000000b9e963bc): kobject_uevent_env [ 2138.276780] kobject: 'loop4' (00000000d2aa5d9a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2138.292938] kobject: 'rx-0' (00000000b9e963bc): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/rx-0' [ 2138.303563] kobject: 'tx-0' (000000000ef63c67): kobject_add_internal: parent: 'queues', set: 'queues' [ 2138.313262] kobject: 'tx-0' (000000000ef63c67): kobject_uevent_env [ 2138.319669] kobject: 'tx-0' (000000000ef63c67): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/tx-0' [ 2138.388580] kobject: 'rx-0' (00000000b9e963bc): kobject_cleanup, parent 0000000060f0a22f [ 2138.396879] kobject: 'rx-0' (00000000b9e963bc): auto cleanup 'remove' event [ 2138.404378] kobject: 'rx-0' (00000000b9e963bc): kobject_uevent_env [ 2138.410781] kobject: 'rx-0' (00000000b9e963bc): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/rx-0' [ 2138.421906] kobject: 'rx-0' (00000000b9e963bc): auto cleanup kobject_del [ 2138.428902] kobject: 'rx-0' (00000000b9e963bc): calling ktype release [ 2138.435511] kobject: 'rx-0': free name [ 2138.439532] kobject: 'tx-0' (000000000ef63c67): kobject_cleanup, parent 0000000060f0a22f [ 2138.447780] kobject: 'tx-0' (000000000ef63c67): auto cleanup 'remove' event [ 2138.454921] kobject: 'tx-0' (000000000ef63c67): kobject_uevent_env [ 2138.461329] kobject: 'tx-0' (000000000ef63c67): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/tx-0' [ 2138.471828] kobject: 'tx-0' (000000000ef63c67): auto cleanup kobject_del [ 2138.478742] kobject: 'tx-0' (000000000ef63c67): calling ktype release [ 2138.485335] kobject: 'tx-0': free name [ 2138.489272] kobject: 'queues' (0000000060f0a22f): kobject_cleanup, parent (null) [ 2138.497687] kobject: 'queues' (0000000060f0a22f): calling ktype release [ 2138.504499] kobject: 'queues' (0000000060f0a22f): kset_release [ 2138.510529] kobject: 'queues': free name [ 2138.514929] kobject: 'ip_vti0' (00000000bfe7ec78): kobject_uevent_env [ 2138.521625] kobject: 'ip_vti0' (00000000bfe7ec78): fill_kobj_path: path = '/devices/virtual/net/ip_vti0' [ 2138.549998] kobject: 'ip_vti0' (00000000bfe7ec78): kobject_cleanup, parent (null) [ 2138.558993] kobject: 'ip_vti0' (00000000bfe7ec78): calling ktype release [ 2138.565980] kobject: 'ip_vti0': free name [ 2138.573134] kobject: 'batman_adv' (000000003448a388): kobject_uevent_env [ 2138.580725] kobject: 'batman_adv' (000000003448a388): kobject_uevent_env: filter function caused the event to drop! [ 2138.593461] kobject: 'batman_adv' (000000003448a388): kobject_cleanup, parent (null) [ 2138.602804] kobject: 'batman_adv' (000000003448a388): calling ktype release [ 2138.612318] kobject: (000000003448a388): dynamic_kobj_release [ 2138.618775] kobject: 'batman_adv': free name [ 2138.623396] kobject: 'rx-0' (00000000a0d79404): kobject_cleanup, parent 00000000e09af8db [ 2138.633822] kobject: 'rx-0' (00000000a0d79404): auto cleanup 'remove' event [ 2138.641511] kobject: 'rx-0' (00000000a0d79404): kobject_uevent_env [ 2138.650010] kobject: 'rx-0' (00000000a0d79404): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/rx-0' [ 2138.661417] kobject: 'rx-0' (00000000a0d79404): auto cleanup kobject_del [ 2138.670418] kobject: 'rx-0' (00000000a0d79404): calling ktype release [ 2138.677049] kobject: 'rx-0': free name [ 2138.681584] kobject: 'tx-0' (00000000e8cbfc0c): kobject_cleanup, parent 00000000e09af8db [ 2138.691896] kobject: 'tx-0' (00000000e8cbfc0c): auto cleanup 'remove' event [ 2138.699557] kobject: 'tx-0' (00000000e8cbfc0c): kobject_uevent_env [ 2138.705964] kobject: 'tx-0' (00000000e8cbfc0c): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/tx-0' [ 2138.716593] kobject: 'tx-0' (00000000e8cbfc0c): auto cleanup kobject_del [ 2138.723537] kobject: 'tx-0' (00000000e8cbfc0c): calling ktype release [ 2138.730138] kobject: 'tx-0': free name [ 2138.734034] kobject: 'queues' (00000000e09af8db): kobject_cleanup, parent (null) [ 2138.742648] kobject: 'queues' (00000000e09af8db): calling ktype release [ 2138.749497] kobject: 'queues' (00000000e09af8db): kset_release [ 2138.755495] kobject: 'queues': free name [ 2138.759927] kobject: 'erspan0' (00000000169ce032): kobject_uevent_env [ 2138.766556] kobject: 'erspan0' (00000000169ce032): fill_kobj_path: path = '/devices/virtual/net/erspan0' [ 2138.807998] kobject: 'erspan0' (00000000169ce032): kobject_cleanup, parent (null) [ 2138.816507] kobject: 'erspan0' (00000000169ce032): calling ktype release [ 2138.824414] kobject: 'erspan0': free name [ 2138.829335] kobject: 'batman_adv' (000000001a1b0d44): kobject_uevent_env [ 2138.836163] kobject: 'batman_adv' (000000001a1b0d44): kobject_uevent_env: filter function caused the event to drop! [ 2138.846780] kobject: 'batman_adv' (000000001a1b0d44): kobject_cleanup, parent (null) [ 2138.855639] kobject: 'batman_adv' (000000001a1b0d44): calling ktype release [ 2138.862763] kobject: (000000001a1b0d44): dynamic_kobj_release [ 2138.868806] kobject: 'batman_adv': free name [ 2138.873361] kobject: 'rx-0' (0000000027a758c8): kobject_cleanup, parent 0000000063bfbfa9 [ 2138.881646] kobject: 'rx-0' (0000000027a758c8): auto cleanup 'remove' event [ 2138.888769] kobject: 'rx-0' (0000000027a758c8): kobject_uevent_env [ 2138.895114] kobject: 'rx-0' (0000000027a758c8): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/rx-0' [ 2138.905605] kobject: 'rx-0' (0000000027a758c8): auto cleanup kobject_del [ 2138.912504] kobject: 'rx-0' (0000000027a758c8): calling ktype release [ 2138.919112] kobject: 'rx-0': free name [ 2138.923028] kobject: 'tx-0' (000000009c36d696): kobject_cleanup, parent 0000000063bfbfa9 [ 2138.931268] kobject: 'tx-0' (000000009c36d696): auto cleanup 'remove' event [ 2138.938393] kobject: 'tx-0' (000000009c36d696): kobject_uevent_env [ 2138.944746] kobject: 'tx-0' (000000009c36d696): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/tx-0' [ 2138.955213] kobject: 'tx-0' (000000009c36d696): auto cleanup kobject_del [ 2138.962085] kobject: 'tx-0' (000000009c36d696): calling ktype release [ 2138.968692] kobject: 'tx-0': free name [ 2138.972586] kobject: 'queues' (0000000063bfbfa9): kobject_cleanup, parent (null) [ 2138.981007] kobject: 'queues' (0000000063bfbfa9): calling ktype release [ 2138.987781] kobject: 'queues' (0000000063bfbfa9): kset_release [ 2138.993787] kobject: 'queues': free name [ 2138.998204] kobject: 'gretap0' (000000004dc1d7e6): kobject_uevent_env [ 2139.004800] kobject: 'gretap0' (000000004dc1d7e6): fill_kobj_path: path = '/devices/virtual/net/gretap0' [ 2139.058074] kobject: 'gretap0' (000000004dc1d7e6): kobject_cleanup, parent (null) [ 2139.066583] kobject: 'gretap0' (000000004dc1d7e6): calling ktype release [ 2139.073453] kobject: 'gretap0': free name [ 2139.078137] kobject: 'rx-0' (000000008b749e6f): kobject_cleanup, parent 00000000af46ae54 [ 2139.086364] kobject: 'rx-0' (000000008b749e6f): auto cleanup 'remove' event [ 2139.093484] kobject: 'rx-0' (000000008b749e6f): kobject_uevent_env [ 2139.099859] kobject: 'rx-0' (000000008b749e6f): fill_kobj_path: path = '/devices/virtual/net/gre0/queues/rx-0' [ 2139.110136] kobject: 'rx-0' (000000008b749e6f): auto cleanup kobject_del [ 2139.117010] kobject: 'rx-0' (000000008b749e6f): calling ktype release [ 2139.123600] kobject: 'rx-0': free name [ 2139.127513] kobject: 'tx-0' (00000000a9935eb6): kobject_cleanup, parent 00000000af46ae54 [ 2139.135752] kobject: 'tx-0' (00000000a9935eb6): auto cleanup 'remove' event [ 2139.142881] kobject: 'tx-0' (00000000a9935eb6): kobject_uevent_env [ 2139.149251] kobject: 'tx-0' (00000000a9935eb6): fill_kobj_path: path = '/devices/virtual/net/gre0/queues/tx-0' [ 2139.159485] kobject: 'tx-0' (00000000a9935eb6): auto cleanup kobject_del [ 2139.166717] kobject: 'tx-0' (00000000a9935eb6): calling ktype release [ 2139.173366] kobject: 'tx-0': free name [ 2139.177406] kobject: 'queues' (00000000af46ae54): kobject_cleanup, parent (null) [ 2139.186075] kobject: 'queues' (00000000af46ae54): calling ktype release [ 2139.192896] kobject: 'queues' (00000000af46ae54): kset_release [ 2139.198900] kobject: 'queues': free name [ 2139.203304] kobject: 'gre0' (00000000cb3e34bd): kobject_uevent_env [ 2139.210022] kobject: 'gre0' (00000000cb3e34bd): fill_kobj_path: path = '/devices/virtual/net/gre0' [ 2139.247985] kobject: 'gre0' (00000000cb3e34bd): kobject_cleanup, parent (null) [ 2139.256240] kobject: 'gre0' (00000000cb3e34bd): calling ktype release [ 2139.263439] kobject: 'gre0': free name [ 2139.267773] kobject: 'rx-0' (00000000addf8a6c): kobject_cleanup, parent 00000000d8cfdcc9 [ 2139.276385] kobject: 'rx-0' (00000000addf8a6c): auto cleanup 'remove' event [ 2139.283550] kobject: 'rx-0' (00000000addf8a6c): kobject_uevent_env [ 2139.289950] kobject: 'rx-0' (00000000addf8a6c): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/rx-0' [ 2139.300363] kobject: 'rx-0' (00000000addf8a6c): auto cleanup kobject_del [ 2139.307224] kobject: 'rx-0' (00000000addf8a6c): calling ktype release [ 2139.314083] kobject: 'rx-0': free name [ 2139.318062] kobject: 'tx-0' (00000000fde1894d): kobject_cleanup, parent 00000000d8cfdcc9 [ 2139.326341] kobject: 'tx-0' (00000000fde1894d): auto cleanup 'remove' event [ 2139.333499] kobject: 'tx-0' (00000000fde1894d): kobject_uevent_env [ 2139.339859] kobject: 'tx-0' (00000000fde1894d): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/tx-0' [ 2139.350184] kobject: 'tx-0' (00000000fde1894d): auto cleanup kobject_del [ 2139.357056] kobject: 'tx-0' (00000000fde1894d): calling ktype release [ 2139.363676] kobject: 'tx-0': free name [ 2139.367583] kobject: 'queues' (00000000d8cfdcc9): kobject_cleanup, parent (null) [ 2139.376013] kobject: 'queues' (00000000d8cfdcc9): calling ktype release [ 2139.383690] kobject: 'queues' (00000000d8cfdcc9): kset_release [ 2139.389740] kobject: 'queues': free name [ 2139.394152] kobject: 'tunl0' (00000000ce1028fe): kobject_uevent_env [ 2139.400630] kobject: 'tunl0' (00000000ce1028fe): fill_kobj_path: path = '/devices/virtual/net/tunl0' [ 2139.447974] kobject: 'tunl0' (00000000ce1028fe): kobject_cleanup, parent (null) [ 2139.456322] kobject: 'tunl0' (00000000ce1028fe): calling ktype release [ 2139.463146] kobject: 'tunl0': free name [ 2139.468066] kobject: 'rx-0' (00000000accb724e): kobject_cleanup, parent 000000003d7c6fc4 [ 2139.476298] kobject: 'rx-0' (00000000accb724e): auto cleanup 'remove' event [ 2139.483422] kobject: 'rx-0' (00000000accb724e): kobject_uevent_env [ 2139.489810] kobject: 'rx-0' (00000000accb724e): fill_kobj_path: path = '/devices/virtual/net/lo/queues/rx-0' [ 2139.500025] kobject: 'rx-0' (00000000accb724e): auto cleanup kobject_del [ 2139.506868] kobject: 'rx-0' (00000000accb724e): calling ktype release [ 2139.513464] kobject: 'rx-0': free name [ 2139.517386] kobject: 'tx-0' (0000000099126b28): kobject_cleanup, parent 000000003d7c6fc4 [ 2139.525814] kobject: 'tx-0' (0000000099126b28): auto cleanup 'remove' event [ 2139.532951] kobject: 'tx-0' (0000000099126b28): kobject_uevent_env [ 2139.539302] kobject: 'tx-0' (0000000099126b28): fill_kobj_path: path = '/devices/virtual/net/lo/queues/tx-0' [ 2139.549352] kobject: 'tx-0' (0000000099126b28): auto cleanup kobject_del [ 2139.556236] kobject: 'tx-0' (0000000099126b28): calling ktype release [ 2139.562837] kobject: 'tx-0': free name [ 2139.566743] kobject: 'queues' (000000003d7c6fc4): kobject_cleanup, parent (null) [ 2139.575168] kobject: 'queues' (000000003d7c6fc4): calling ktype release [ 2139.581943] kobject: 'queues' (000000003d7c6fc4): kset_release [ 2139.587955] kobject: 'queues': free name [ 2139.592310] kobject: 'lo' (0000000041d3a2c7): kobject_uevent_env [ 2139.598528] kobject: 'lo' (0000000041d3a2c7): fill_kobj_path: path = '/devices/virtual/net/lo' [ 2139.627951] kobject: 'lo' (0000000041d3a2c7): kobject_cleanup, parent (null) [ 2139.636034] kobject: 'lo' (0000000041d3a2c7): calling ktype release [ 2139.657890] kobject: 'lo': free name 15:30:40 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:40 executing program 3: ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x0, 0x7, 0x0, 0x2, 0x9, 0x101, 0x6, 0x40, 0x8, 0x5, 0x745c, 0x4, 0x3ff, 0x6, 0x10, 0x4}}) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:40 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:40 executing program 5: setxattr$security_capability(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.capability\x00', 0x0, 0x0, 0x2) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000180)) r0 = fcntl$getown(0xffffffffffffff9c, 0x9) r1 = socket$isdn_base(0x22, 0x3, 0x0) r2 = socket$inet6(0xa, 0x801, 0x5) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) r5 = syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x7, 0x80000) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000b00)=ANY=[@ANYBLOB="08000000000000001f000000000000000500000000000000", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="00000000018000000000000000000000000000000000000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000000000000000000000000000000000000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00J\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="4006000000000000cc990000000000000000003a244f1c667cabcc1cdfa600f3928a60aba78af62d61e94bd1e7f09dd4d4303927e70b0f1035ab3c4d0df06ae273e31e20ab35054e8866704ed71c4727b74ff51055b6f9137d4a91a8de67ceceab8761f2d3b52eec4ccfd25943e856d90443b23688a4182fd61da107b62944c81196c1271e8593b0ead87a61708d53b1c2441ebdf13073629388ca5e4409cd4870a4f8d6ec355c47d5e1"]) r7 = syz_open_dev$cec(&(0x7f00000004c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$KVM_CHECK_EXTENSION_VM(r7, 0xae03, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, &(0x7f0000000380)=""/93) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x0) getresuid(0x0, 0x0, &(0x7f00000001c0)) socket$xdp(0x2c, 0x3, 0x0) r8 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_STD(r8, 0x80085617, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000a80)='keyring]\x00'}, 0x30) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0x0) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000540)={[0x0, 0x1, 0x8, 0x4, 0x1ff, 0x3, 0x39aa, 0x1, 0x400, 0x2, 0x8, 0x101, 0x100000000, 0x100, 0xc8b3c02, 0x100000001], 0x3000, 0x40200}) prctl$PR_CAPBSET_READ(0x17, 0x1e) ioctl$EVIOCGBITSW(r9, 0x80404525, &(0x7f0000000240)=""/114) unshare(0x40000000) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r9, 0xc0305615, &(0x7f00000000c0)={0x0, {0x1}}) syz_open_dev$loop(0x0, 0x100000001, 0x0) 15:30:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) fsetxattr$security_smack_entry(r0, &(0x7f00000001c0)='security.SMACK64EXEC\x00', &(0x7f0000000200)='GPLvboxnet1\x00', 0xc, 0x1) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x80000, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000180)={0x9}, 0x4) 15:30:40 executing program 4: r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff8e) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) readahead(r0, 0x4, 0x1f) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file1\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x0, 0x111000) 15:30:40 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5800], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2140.399884] kobject: 'loop5' (000000002f6317bf): kobject_uevent_env [ 2140.408129] kobject: 'loop5' (000000002f6317bf): fill_kobj_path: path = '/devices/virtual/block/loop5' 15:30:40 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) 15:30:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={r2, 0x1000}, &(0x7f0000000240)=0x8) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0xfffffffffffffe7c) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) r3 = socket$nl_crypto(0x10, 0x3, 0x15) shutdown(r3, 0x1) 15:30:40 executing program 3: ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 2140.447831] kobject: 'loop0' (00000000e1a16639): kobject_uevent_env [ 2140.477389] kobject: 'loop0' (00000000e1a16639): fill_kobj_path: path = '/devices/virtual/block/loop0' 15:30:40 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:40 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) [ 2140.530191] IPVS: ftp: loaded support on port[0] = 21 [ 2140.539154] kobject: 'loop2' (00000000418dbd4d): kobject_uevent_env [ 2140.545599] kobject: 'loop2' (00000000418dbd4d): fill_kobj_path: path = '/devices/virtual/block/loop2' 15:30:40 executing program 3: ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 2140.591097] kobject: 'lo' (0000000014987ab0): kobject_add_internal: parent: 'net', set: 'devices' [ 2140.600970] kobject: 'loop1' (0000000081728edf): kobject_uevent_env [ 2140.610209] kobject: 'loop1' (0000000081728edf): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2140.633590] kobject: 'lo' (0000000014987ab0): kobject_uevent_env 15:30:40 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) 15:30:40 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2140.645289] kobject: 'loop3' (00000000cecf427d): kobject_uevent_env [ 2140.655852] kobject: 'lo' (0000000014987ab0): fill_kobj_path: path = '/devices/virtual/net/lo' [ 2140.666730] kobject: 'loop3' (00000000cecf427d): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2140.686698] kobject: 'queues' (00000000aed7fcb9): kobject_add_internal: parent: 'lo', set: '' [ 2140.700999] kobject: 'loop3' (00000000cecf427d): kobject_uevent_env [ 2140.707436] kobject: 'loop3' (00000000cecf427d): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2140.717758] kobject: 'queues' (00000000aed7fcb9): kobject_uevent_env [ 2140.726050] kobject: 'queues' (00000000aed7fcb9): kobject_uevent_env: filter function caused the event to drop! [ 2140.737032] kobject: 'loop0' (00000000e1a16639): kobject_uevent_env [ 2140.743762] kobject: 'rx-0' (00000000e7d1825a): kobject_add_internal: parent: 'queues', set: 'queues' [ 2140.753363] kobject: 'loop0' (00000000e1a16639): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2140.763199] kobject: 'rx-0' (00000000e7d1825a): kobject_uevent_env [ 2140.769970] kobject: 'loop1' (0000000081728edf): kobject_uevent_env [ 2140.776420] kobject: 'loop1' (0000000081728edf): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2140.786096] kobject: 'rx-0' (00000000e7d1825a): fill_kobj_path: path = '/devices/virtual/net/lo/queues/rx-0' [ 2140.796705] kobject: 'tx-0' (00000000affcce13): kobject_add_internal: parent: 'queues', set: 'queues' [ 2140.809954] kobject: 'loop3' (00000000cecf427d): kobject_uevent_env [ 2140.816401] kobject: 'loop3' (00000000cecf427d): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2140.826599] kobject: 'tx-0' (00000000affcce13): kobject_uevent_env [ 2140.838707] kobject: 'loop0' (00000000e1a16639): kobject_uevent_env [ 2140.840747] kobject: 'tx-0' (00000000affcce13): fill_kobj_path: path = '/devices/virtual/net/lo/queues/tx-0' [ 2140.845166] kobject: 'loop0' (00000000e1a16639): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2140.859610] kobject: 'tunl0' (00000000bbfab3d2): kobject_add_internal: parent: 'net', set: 'devices' [ 2140.868174] kobject: 'loop4' (00000000d2aa5d9a): kobject_uevent_env [ 2140.881165] kobject: 'loop4' (00000000d2aa5d9a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2140.885720] kobject: 'tunl0' (00000000bbfab3d2): kobject_uevent_env [ 2140.902430] kobject: 'tunl0' (00000000bbfab3d2): fill_kobj_path: path = '/devices/virtual/net/tunl0' [ 2140.913245] kobject: 'queues' (000000007d905707): kobject_add_internal: parent: 'tunl0', set: '' [ 2140.931651] kobject: 'queues' (000000007d905707): kobject_uevent_env [ 2140.939057] kobject: 'queues' (000000007d905707): kobject_uevent_env: filter function caused the event to drop! [ 2140.952471] kobject: 'rx-0' (0000000000c57867): kobject_add_internal: parent: 'queues', set: 'queues' [ 2140.962562] kobject: 'rx-0' (0000000000c57867): kobject_uevent_env [ 2140.969086] kobject: 'rx-0' (0000000000c57867): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/rx-0' [ 2140.979466] kobject: 'tx-0' (000000009849ae00): kobject_add_internal: parent: 'queues', set: 'queues' [ 2140.989420] kobject: 'tx-0' (000000009849ae00): kobject_uevent_env [ 2140.995824] kobject: 'tx-0' (000000009849ae00): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/tx-0' [ 2141.007208] kobject: 'gre0' (00000000ee6daf00): kobject_add_internal: parent: 'net', set: 'devices' [ 2141.017370] kobject: 'gre0' (00000000ee6daf00): kobject_uevent_env [ 2141.023808] kobject: 'gre0' (00000000ee6daf00): fill_kobj_path: path = '/devices/virtual/net/gre0' [ 2141.033198] kobject: 'queues' (000000005de8ebf6): kobject_add_internal: parent: 'gre0', set: '' [ 2141.042603] kobject: 'queues' (000000005de8ebf6): kobject_uevent_env [ 2141.049163] kobject: 'queues' (000000005de8ebf6): kobject_uevent_env: filter function caused the event to drop! [ 2141.059462] kobject: 'rx-0' (00000000b346b2be): kobject_add_internal: parent: 'queues', set: 'queues' [ 2141.069074] kobject: 'rx-0' (00000000b346b2be): kobject_uevent_env [ 2141.075466] kobject: 'rx-0' (00000000b346b2be): fill_kobj_path: path = '/devices/virtual/net/gre0/queues/rx-0' [ 2141.085889] kobject: 'tx-0' (000000000ebe4f19): kobject_add_internal: parent: 'queues', set: 'queues' [ 2141.095413] kobject: 'tx-0' (000000000ebe4f19): kobject_uevent_env [ 2141.101954] kobject: 'tx-0' (000000000ebe4f19): fill_kobj_path: path = '/devices/virtual/net/gre0/queues/tx-0' [ 2141.113038] kobject: 'gretap0' (00000000f02a3d48): kobject_add_internal: parent: 'net', set: 'devices' [ 2141.123417] kobject: 'gretap0' (00000000f02a3d48): kobject_uevent_env [ 2141.130166] kobject: 'gretap0' (00000000f02a3d48): fill_kobj_path: path = '/devices/virtual/net/gretap0' [ 2141.140151] kobject: 'queues' (000000003f2adb5e): kobject_add_internal: parent: 'gretap0', set: '' [ 2141.149941] kobject: 'queues' (000000003f2adb5e): kobject_uevent_env [ 2141.156457] kobject: 'queues' (000000003f2adb5e): kobject_uevent_env: filter function caused the event to drop! [ 2141.166941] kobject: 'rx-0' (000000008d43f960): kobject_add_internal: parent: 'queues', set: 'queues' [ 2141.176579] kobject: 'rx-0' (000000008d43f960): kobject_uevent_env [ 2141.182985] kobject: 'rx-0' (000000008d43f960): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/rx-0' [ 2141.193733] kobject: 'tx-0' (00000000fd95aeb6): kobject_add_internal: parent: 'queues', set: 'queues' [ 2141.203260] kobject: 'tx-0' (00000000fd95aeb6): kobject_uevent_env [ 2141.209767] kobject: 'tx-0' (00000000fd95aeb6): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/tx-0' [ 2141.221186] kobject: 'batman_adv' (000000000ddf5e9a): kobject_add_internal: parent: 'gretap0', set: '' [ 2141.231979] kobject: 'erspan0' (00000000abe3b069): kobject_add_internal: parent: 'net', set: 'devices' [ 2141.242231] kobject: 'erspan0' (00000000abe3b069): kobject_uevent_env [ 2141.249037] kobject: 'erspan0' (00000000abe3b069): fill_kobj_path: path = '/devices/virtual/net/erspan0' [ 2141.259052] kobject: 'queues' (00000000c034fd13): kobject_add_internal: parent: 'erspan0', set: '' [ 2141.261337] base_sock_release(00000000206fda82) sk=00000000034063de [ 2141.268829] kobject: 'queues' (00000000c034fd13): kobject_uevent_env [ 2141.281770] kobject: 'queues' (00000000c034fd13): kobject_uevent_env: filter function caused the event to drop! [ 2141.292045] kobject: 'rx-0' (0000000069b6a2f9): kobject_add_internal: parent: 'queues', set: 'queues' [ 2141.301638] kobject: 'rx-0' (0000000069b6a2f9): kobject_uevent_env [ 2141.308038] kobject: 'rx-0' (0000000069b6a2f9): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/rx-0' [ 2141.318511] kobject: 'tx-0' (00000000b24b71eb): kobject_add_internal: parent: 'queues', set: 'queues' [ 2141.328017] kobject: 'tx-0' (00000000b24b71eb): kobject_uevent_env [ 2141.334352] kobject: 'tx-0' (00000000b24b71eb): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/tx-0' [ 2141.345261] kobject: 'batman_adv' (000000006e1abb92): kobject_add_internal: parent: 'erspan0', set: '' [ 2141.355534] kobject: 'ip_vti0' (00000000ec3384fa): kobject_add_internal: parent: 'net', set: 'devices' [ 2141.365387] kobject: 'ip_vti0' (00000000ec3384fa): kobject_uevent_env [ 2141.372011] kobject: 'ip_vti0' (00000000ec3384fa): fill_kobj_path: path = '/devices/virtual/net/ip_vti0' [ 2141.383004] kobject: 'queues' (000000005438ba95): kobject_add_internal: parent: 'ip_vti0', set: '' [ 2141.393821] kobject: 'queues' (000000005438ba95): kobject_uevent_env [ 2141.400405] kobject: 'queues' (000000005438ba95): kobject_uevent_env: filter function caused the event to drop! [ 2141.410727] kobject: 'rx-0' (00000000c087934b): kobject_add_internal: parent: 'queues', set: 'queues' [ 2141.420153] kobject: 'rx-0' (00000000c087934b): kobject_uevent_env [ 2141.426495] kobject: 'rx-0' (00000000c087934b): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/rx-0' [ 2141.436996] kobject: 'tx-0' (000000003d926423): kobject_add_internal: parent: 'queues', set: 'queues' [ 2141.446429] kobject: 'tx-0' (000000003d926423): kobject_uevent_env [ 2141.452794] kobject: 'tx-0' (000000003d926423): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/tx-0' [ 2141.463892] kobject: 'ip6_vti0' (00000000aa1c712e): kobject_add_internal: parent: 'net', set: 'devices' [ 2141.473883] kobject: 'ip6_vti0' (00000000aa1c712e): kobject_uevent_env [ 2141.480571] kobject: 'ip6_vti0' (00000000aa1c712e): fill_kobj_path: path = '/devices/virtual/net/ip6_vti0' [ 2141.490445] kobject: 'queues' (0000000035ef75eb): kobject_add_internal: parent: 'ip6_vti0', set: '' [ 2141.500183] kobject: 'queues' (0000000035ef75eb): kobject_uevent_env [ 2141.506656] kobject: 'queues' (0000000035ef75eb): kobject_uevent_env: filter function caused the event to drop! [ 2141.517072] kobject: 'rx-0' (000000006afba4ee): kobject_add_internal: parent: 'queues', set: 'queues' [ 2141.526501] kobject: 'rx-0' (000000006afba4ee): kobject_uevent_env [ 2141.532864] kobject: 'rx-0' (000000006afba4ee): fill_kobj_path: path = '/devices/virtual/net/ip6_vti0/queues/rx-0' [ 2141.543502] kobject: 'tx-0' (00000000d9259a4d): kobject_add_internal: parent: 'queues', set: 'queues' [ 2141.553019] kobject: 'tx-0' (00000000d9259a4d): kobject_uevent_env [ 2141.559372] kobject: 'tx-0' (00000000d9259a4d): fill_kobj_path: path = '/devices/virtual/net/ip6_vti0/queues/tx-0' [ 2141.570623] kobject: 'sit0' (0000000019634e01): kobject_add_internal: parent: 'net', set: 'devices' [ 2141.580133] kobject: 'sit0' (0000000019634e01): kobject_uevent_env [ 2141.586449] kobject: 'sit0' (0000000019634e01): fill_kobj_path: path = '/devices/virtual/net/sit0' [ 2141.595625] kobject: 'queues' (00000000624cf14b): kobject_add_internal: parent: 'sit0', set: '' [ 2141.605010] kobject: 'queues' (00000000624cf14b): kobject_uevent_env [ 2141.611526] kobject: 'queues' (00000000624cf14b): kobject_uevent_env: filter function caused the event to drop! [ 2141.621773] kobject: 'rx-0' (00000000706c276e): kobject_add_internal: parent: 'queues', set: 'queues' [ 2141.631185] kobject: 'rx-0' (00000000706c276e): kobject_uevent_env [ 2141.637582] kobject: 'rx-0' (00000000706c276e): fill_kobj_path: path = '/devices/virtual/net/sit0/queues/rx-0' [ 2141.647798] kobject: 'tx-0' (00000000c198bcc2): kobject_add_internal: parent: 'queues', set: 'queues' [ 2141.657289] kobject: 'tx-0' (00000000c198bcc2): kobject_uevent_env [ 2141.663648] kobject: 'tx-0' (00000000c198bcc2): fill_kobj_path: path = '/devices/virtual/net/sit0/queues/tx-0' [ 2141.674369] kobject: 'ip6tnl0' (000000005d12610b): kobject_add_internal: parent: 'net', set: 'devices' [ 2141.684219] kobject: 'ip6tnl0' (000000005d12610b): kobject_uevent_env [ 2141.690819] kobject: 'ip6tnl0' (000000005d12610b): fill_kobj_path: path = '/devices/virtual/net/ip6tnl0' [ 2141.700529] kobject: 'queues' (000000003d54fc88): kobject_add_internal: parent: 'ip6tnl0', set: '' [ 2141.710197] kobject: 'queues' (000000003d54fc88): kobject_uevent_env [ 2141.716677] kobject: 'queues' (000000003d54fc88): kobject_uevent_env: filter function caused the event to drop! [ 2141.726932] kobject: 'rx-0' (0000000011efb64e): kobject_add_internal: parent: 'queues', set: 'queues' [ 2141.736328] kobject: 'rx-0' (0000000011efb64e): kobject_uevent_env [ 2141.742689] kobject: 'rx-0' (0000000011efb64e): fill_kobj_path: path = '/devices/virtual/net/ip6tnl0/queues/rx-0' [ 2141.753146] kobject: 'tx-0' (00000000b8341c24): kobject_add_internal: parent: 'queues', set: 'queues' [ 2141.762643] kobject: 'tx-0' (00000000b8341c24): kobject_uevent_env [ 2141.769022] kobject: 'tx-0' (00000000b8341c24): fill_kobj_path: path = '/devices/virtual/net/ip6tnl0/queues/tx-0' [ 2141.780131] kobject: 'ip6gre0' (000000005b7a8842): kobject_add_internal: parent: 'net', set: 'devices' [ 2141.790153] kobject: 'ip6gre0' (000000005b7a8842): kobject_uevent_env [ 2141.796746] kobject: 'ip6gre0' (000000005b7a8842): fill_kobj_path: path = '/devices/virtual/net/ip6gre0' [ 2141.806443] kobject: 'queues' (00000000ac4d464e): kobject_add_internal: parent: 'ip6gre0', set: '' [ 2141.816099] kobject: 'queues' (00000000ac4d464e): kobject_uevent_env [ 2141.822606] kobject: 'queues' (00000000ac4d464e): kobject_uevent_env: filter function caused the event to drop! [ 2141.832860] kobject: 'rx-0' (000000006bcde4b8): kobject_add_internal: parent: 'queues', set: 'queues' [ 2141.842285] kobject: 'rx-0' (000000006bcde4b8): kobject_uevent_env 15:30:41 executing program 5: setxattr$security_capability(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.capability\x00', 0x0, 0x0, 0x2) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000180)) r0 = fcntl$getown(0xffffffffffffff9c, 0x9) r1 = socket$isdn_base(0x22, 0x3, 0x0) r2 = socket$inet6(0xa, 0x801, 0x5) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) r5 = syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x7, 0x80000) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000b00)=ANY=[@ANYBLOB="08000000000000001f000000000000000500000000000000", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="00000000018000000000000000000000000000000000000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000000000000000000000000000000000000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00J\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="4006000000000000cc990000000000000000003a244f1c667cabcc1cdfa600f3928a60aba78af62d61e94bd1e7f09dd4d4303927e70b0f1035ab3c4d0df06ae273e31e20ab35054e8866704ed71c4727b74ff51055b6f9137d4a91a8de67ceceab8761f2d3b52eec4ccfd25943e856d90443b23688a4182fd61da107b62944c81196c1271e8593b0ead87a61708d53b1c2441ebdf13073629388ca5e4409cd4870a4f8d6ec355c47d5e1"]) r7 = syz_open_dev$cec(&(0x7f00000004c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$KVM_CHECK_EXTENSION_VM(r7, 0xae03, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, &(0x7f0000000380)=""/93) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x0) getresuid(0x0, 0x0, &(0x7f00000001c0)) socket$xdp(0x2c, 0x3, 0x0) r8 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_STD(r8, 0x80085617, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000a80)='keyring]\x00'}, 0x30) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0x0) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000540)={[0x0, 0x1, 0x8, 0x4, 0x1ff, 0x3, 0x39aa, 0x1, 0x400, 0x2, 0x8, 0x101, 0x100000000, 0x100, 0xc8b3c02, 0x100000001], 0x3000, 0x40200}) prctl$PR_CAPBSET_READ(0x17, 0x1e) ioctl$EVIOCGBITSW(r9, 0x80404525, &(0x7f0000000240)=""/114) unshare(0x40000000) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r9, 0xc0305615, &(0x7f00000000c0)={0x0, {0x1}}) syz_open_dev$loop(0x0, 0x100000001, 0x0) 15:30:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000014, &(0x7f0000000080)=0x3, 0x4) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f00000001c0)=""/30, &(0x7f0000000200)=0x1e) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0xffffffffffffffaf) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@sack_perm, @sack_perm, @mss, @mss, @timestamp, @mss={0x2, 0x12f7}], 0x6) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x200, 0x0) [ 2141.848659] kobject: 'rx-0' (000000006bcde4b8): fill_kobj_path: path = '/devices/virtual/net/ip6gre0/queues/rx-0' [ 2141.859145] kobject: 'tx-0' (0000000090fa0b93): kobject_add_internal: parent: 'queues', set: 'queues' [ 2141.868654] kobject: 'tx-0' (0000000090fa0b93): kobject_uevent_env [ 2141.874980] kobject: 'tx-0' (0000000090fa0b93): fill_kobj_path: path = '/devices/virtual/net/ip6gre0/queues/tx-0' [ 2141.898753] kobject: 'loop5' (000000002f6317bf): kobject_uevent_env 15:30:41 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:41 executing program 3: ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:41 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:41 executing program 4: r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff8e) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) readahead(r0, 0x4, 0x1f) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file1\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x0, 0x111000) 15:30:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000, 0x1}, 0x14) shutdown(r0, 0x1) [ 2141.913838] kobject: 'loop5' (000000002f6317bf): fill_kobj_path: path = '/devices/virtual/block/loop5' 15:30:41 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:41 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:41 executing program 3: ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x0, 0x0, 0x0, 0x2, 0x9, 0x101, 0x6, 0x40, 0x8, 0x5, 0x745c, 0x4, 0x3ff, 0x6, 0x10, 0x4}}) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 2141.963155] kobject: 'loop1' (0000000081728edf): kobject_uevent_env [ 2141.999832] kobject: 'loop1' (0000000081728edf): fill_kobj_path: path = '/devices/virtual/block/loop1' 15:30:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x2b) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x1) 15:30:42 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2142.013588] kobject: 'rx-0' (000000006bcde4b8): kobject_cleanup, parent 00000000ac4d464e [ 2142.032695] IPVS: ftp: loaded support on port[0] = 21 [ 2142.041355] kobject: 'loop0' (00000000e1a16639): kobject_uevent_env [ 2142.050301] kobject: 'rx-0' (000000006bcde4b8): auto cleanup 'remove' event [ 2142.076332] kobject: 'loop0' (00000000e1a16639): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2142.091444] kobject: 'rx-0' (000000006bcde4b8): kobject_uevent_env [ 2142.111611] kobject: 'rx-0' (000000006bcde4b8): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2142.123314] kobject: 'loop2' (00000000418dbd4d): kobject_uevent_env [ 2142.135124] kobject: 'loop2' (00000000418dbd4d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2142.154979] kobject: 'rx-0' (000000006bcde4b8): auto cleanup kobject_del [ 2142.163120] kobject: 'rx-0' (000000006bcde4b8): calling ktype release [ 2142.172592] kobject: 'loop3' (00000000cecf427d): kobject_uevent_env [ 2142.180734] kobject: 'rx-0': free name [ 2142.184746] kobject: 'loop3' (00000000cecf427d): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2142.197163] kobject: 'tx-0' (0000000090fa0b93): kobject_cleanup, parent 00000000ac4d464e [ 2142.206637] kobject: 'loop2' (00000000418dbd4d): kobject_uevent_env [ 2142.213221] kobject: 'tx-0' (0000000090fa0b93): auto cleanup 'remove' event [ 2142.221261] kobject: 'loop2' (00000000418dbd4d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2142.230837] kobject: 'tx-0' (0000000090fa0b93): kobject_uevent_env [ 2142.237255] kobject: 'tx-0' (0000000090fa0b93): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2142.250416] kobject: 'loop1' (0000000081728edf): kobject_uevent_env [ 2142.256961] kobject: 'loop1' (0000000081728edf): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2142.266546] kobject: 'tx-0' (0000000090fa0b93): auto cleanup kobject_del [ 2142.271416] kobject: 'loop3' (00000000cecf427d): kobject_uevent_env [ 2142.280145] kobject: 'loop3' (00000000cecf427d): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2142.284038] kobject: 'tx-0' (0000000090fa0b93): calling ktype release [ 2142.290349] kobject: 'loop2' (00000000418dbd4d): kobject_uevent_env [ 2142.302147] kobject: 'tx-0': free name [ 2142.303222] kobject: 'loop2' (00000000418dbd4d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2142.309422] kobject: 'queues' (00000000ac4d464e): kobject_cleanup, parent (null) [ 2142.320142] kobject: 'loop4' (00000000d2aa5d9a): kobject_uevent_env [ 2142.330961] kobject: 'loop4' (00000000d2aa5d9a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2142.333464] kobject: 'queues' (00000000ac4d464e): calling ktype release [ 2142.354606] kobject: 'queues' (00000000ac4d464e): kset_release [ 2142.364028] kobject: 'queues': free name [ 2142.369388] kobject: 'ip6gre0' (000000005b7a8842): kobject_uevent_env [ 2142.376148] kobject: 'ip6gre0' (000000005b7a8842): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2142.387542] kobject: 'lo' (000000001f8efef4): kobject_add_internal: parent: 'net', set: 'devices' [ 2142.407386] kobject: 'lo' (000000001f8efef4): kobject_uevent_env [ 2142.414364] kobject: 'lo' (000000001f8efef4): fill_kobj_path: path = '/devices/virtual/net/lo' [ 2142.424441] kobject: 'queues' (00000000b68c73ad): kobject_add_internal: parent: 'lo', set: '' [ 2142.433868] kobject: 'queues' (00000000b68c73ad): kobject_uevent_env [ 2142.440646] kobject: 'queues' (00000000b68c73ad): kobject_uevent_env: filter function caused the event to drop! [ 2142.451054] kobject: 'rx-0' (00000000f6d2573e): kobject_add_internal: parent: 'queues', set: 'queues' [ 2142.460546] kobject: 'rx-0' (00000000f6d2573e): kobject_uevent_env [ 2142.466899] kobject: 'rx-0' (00000000f6d2573e): fill_kobj_path: path = '/devices/virtual/net/lo/queues/rx-0' [ 2142.477176] kobject: 'tx-0' (0000000049c1ce91): kobject_add_internal: parent: 'queues', set: 'queues' [ 2142.486733] kobject: 'tx-0' (0000000049c1ce91): kobject_uevent_env [ 2142.493191] kobject: 'tx-0' (0000000049c1ce91): fill_kobj_path: path = '/devices/virtual/net/lo/queues/tx-0' [ 2142.504538] kobject: 'ip6gre0' (000000005b7a8842): kobject_cleanup, parent (null) [ 2142.505257] kobject: 'tunl0' (000000005e34a8f7): kobject_add_internal: parent: 'net', set: 'devices' [ 2142.513229] kobject: 'ip6gre0' (000000005b7a8842): auto cleanup 'remove' event [ 2142.524969] kobject: 'tunl0' (000000005e34a8f7): kobject_uevent_env [ 2142.532516] kobject: 'ip6gre0' (000000005b7a8842): kobject_uevent_env [ 2142.536418] kobject: 'tunl0' (000000005e34a8f7): fill_kobj_path: path = '/devices/virtual/net/tunl0' [ 2142.543157] kobject: 'ip6gre0' (000000005b7a8842): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2142.552577] kobject: 'queues' (000000002e5175d6): kobject_add_internal: parent: 'tunl0', set: '' [ 2142.565237] kobject: 'ip6gre0' (000000005b7a8842): calling ktype release [ 2142.572348] kobject: 'queues' (000000002e5175d6): kobject_uevent_env [ 2142.583117] kobject: 'ip6gre0': free name [ 2142.586077] kobject: 'queues' (000000002e5175d6): kobject_uevent_env: filter function caused the event to drop! [ 2142.600464] kobject: 'rx-0' (000000003ae43283): kobject_add_internal: parent: 'queues', set: 'queues' [ 2142.610152] kobject: 'rx-0' (000000003ae43283): kobject_uevent_env [ 2142.616537] kobject: 'rx-0' (000000003ae43283): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/rx-0' [ 2142.627169] kobject: 'tx-0' (00000000770be1cc): kobject_add_internal: parent: 'queues', set: 'queues' [ 2142.636771] kobject: 'tx-0' (00000000770be1cc): kobject_uevent_env [ 2142.643261] kobject: 'tx-0' (00000000770be1cc): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/tx-0' [ 2142.654986] kobject: 'rx-0' (0000000011efb64e): kobject_cleanup, parent 000000003d54fc88 [ 2142.663340] kobject: 'rx-0' (0000000011efb64e): auto cleanup 'remove' event [ 2142.670507] kobject: 'rx-0' (0000000011efb64e): kobject_uevent_env [ 2142.676841] kobject: 'rx-0' (0000000011efb64e): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2142.686933] kobject: 'rx-0' (0000000011efb64e): auto cleanup kobject_del [ 2142.693809] kobject: 'rx-0' (0000000011efb64e): calling ktype release [ 2142.700421] kobject: 'rx-0': free name [ 2142.704339] kobject: 'tx-0' (00000000b8341c24): kobject_cleanup, parent 000000003d54fc88 [ 2142.712947] kobject: 'tx-0' (00000000b8341c24): auto cleanup 'remove' event [ 2142.720124] kobject: 'tx-0' (00000000b8341c24): kobject_uevent_env [ 2142.723753] base_sock_release(000000000b78c912) sk=000000000f17136d [ 2142.726465] kobject: 'tx-0' (00000000b8341c24): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2142.743161] kobject: 'tx-0' (00000000b8341c24): auto cleanup kobject_del [ 2142.750070] kobject: 'tx-0' (00000000b8341c24): calling ktype release [ 2142.756657] kobject: 'tx-0': free name [ 2142.760647] kobject: 'queues' (000000003d54fc88): kobject_cleanup, parent (null) [ 2142.769071] kobject: 'queues' (000000003d54fc88): calling ktype release [ 2142.775817] kobject: 'queues' (000000003d54fc88): kset_release [ 2142.781820] kobject: 'queues': free name [ 2142.786066] kobject: 'ip6tnl0' (000000005d12610b): kobject_uevent_env [ 2142.792674] kobject: 'ip6tnl0' (000000005d12610b): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2142.803243] kobject: 'gre0' (0000000058d2a456): kobject_add_internal: parent: 'net', set: 'devices' [ 2142.813241] kobject: 'gre0' (0000000058d2a456): kobject_uevent_env [ 2142.819650] kobject: 'gre0' (0000000058d2a456): fill_kobj_path: path = '/devices/virtual/net/gre0' [ 2142.828864] kobject: 'queues' (000000009100d44c): kobject_add_internal: parent: 'gre0', set: '' [ 2142.838295] kobject: 'queues' (000000009100d44c): kobject_uevent_env [ 2142.844793] kobject: 'queues' (000000009100d44c): kobject_uevent_env: filter function caused the event to drop! [ 2142.855060] kobject: 'rx-0' (0000000035ccc0c2): kobject_add_internal: parent: 'queues', set: 'queues' [ 2142.864495] kobject: 'rx-0' (0000000035ccc0c2): kobject_uevent_env [ 2142.870877] kobject: 'rx-0' (0000000035ccc0c2): fill_kobj_path: path = '/devices/virtual/net/gre0/queues/rx-0' [ 2142.881077] kobject: 'tx-0' (000000001a53f99f): kobject_add_internal: parent: 'queues', set: 'queues' [ 2142.890579] kobject: 'tx-0' (000000001a53f99f): kobject_uevent_env [ 2142.896916] kobject: 'tx-0' (000000001a53f99f): fill_kobj_path: path = '/devices/virtual/net/gre0/queues/tx-0' [ 2142.907637] kobject: 'gretap0' (00000000c9ae76da): kobject_add_internal: parent: 'net', set: 'devices' [ 2142.917689] kobject: 'gretap0' (00000000c9ae76da): kobject_uevent_env [ 2142.924339] kobject: 'gretap0' (00000000c9ae76da): fill_kobj_path: path = '/devices/virtual/net/gretap0' [ 2142.934063] kobject: 'queues' (0000000018227f9d): kobject_add_internal: parent: 'gretap0', set: '' [ 2142.943734] kobject: 'queues' (0000000018227f9d): kobject_uevent_env [ 2142.950258] kobject: 'queues' (0000000018227f9d): kobject_uevent_env: filter function caused the event to drop! [ 2142.960545] kobject: 'rx-0' (000000002e5b8341): kobject_add_internal: parent: 'queues', set: 'queues' [ 2142.969968] kobject: 'rx-0' (000000002e5b8341): kobject_uevent_env [ 2142.976320] kobject: 'rx-0' (000000002e5b8341): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/rx-0' [ 2142.986831] kobject: 'tx-0' (00000000ebe5c8a0): kobject_add_internal: parent: 'queues', set: 'queues' [ 2142.996325] kobject: 'tx-0' (00000000ebe5c8a0): kobject_uevent_env [ 2143.002708] kobject: 'tx-0' (00000000ebe5c8a0): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/tx-0' [ 2143.013792] kobject: 'batman_adv' (00000000e0190806): kobject_add_internal: parent: 'gretap0', set: '' [ 2143.024091] kobject: 'ip6tnl0' (000000005d12610b): kobject_cleanup, parent (null) [ 2143.024242] kobject: 'erspan0' (00000000d50a46d7): kobject_add_internal: parent: 'net', set: 'devices' [ 2143.032663] kobject: 'ip6tnl0' (000000005d12610b): auto cleanup 'remove' event [ 2143.042612] kobject: 'erspan0' (00000000d50a46d7): kobject_uevent_env [ 2143.049541] kobject: 'ip6tnl0' (000000005d12610b): kobject_uevent_env [ 2143.049555] kobject: 'ip6tnl0' (000000005d12610b): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2143.058532] kobject: 'erspan0' (00000000d50a46d7): fill_kobj_path: path = '/devices/virtual/net/erspan0' [ 2143.063000] kobject: 'ip6tnl0' (000000005d12610b): calling ktype release [ 2143.075520] kobject: 'queues' (00000000d31597f4): kobject_add_internal: parent: 'erspan0', set: '' [ 2143.082846] kobject: 'ip6tnl0': free name [ 2143.091896] kobject: 'queues' (00000000d31597f4): kobject_uevent_env [ 2143.111129] kobject: 'queues' (00000000d31597f4): kobject_uevent_env: filter function caused the event to drop! [ 2143.121413] kobject: 'rx-0' (000000007f215d64): kobject_add_internal: parent: 'queues', set: 'queues' [ 2143.130856] kobject: 'rx-0' (000000007f215d64): kobject_uevent_env [ 2143.137189] kobject: 'rx-0' (000000007f215d64): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/rx-0' [ 2143.147675] kobject: 'tx-0' (00000000e729fae3): kobject_add_internal: parent: 'queues', set: 'queues' [ 2143.157128] kobject: 'tx-0' (00000000e729fae3): kobject_uevent_env [ 2143.163508] kobject: 'tx-0' (00000000e729fae3): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/tx-0' [ 2143.174365] kobject: 'batman_adv' (00000000cc9c0a2c): kobject_add_internal: parent: 'erspan0', set: '' [ 2143.184796] kobject: 'ip_vti0' (000000009f739fa2): kobject_add_internal: parent: 'net', set: 'devices' [ 2143.194836] kobject: 'ip_vti0' (000000009f739fa2): kobject_uevent_env [ 2143.201476] kobject: 'ip_vti0' (000000009f739fa2): fill_kobj_path: path = '/devices/virtual/net/ip_vti0' [ 2143.211206] kobject: 'queues' (00000000bedef777): kobject_add_internal: parent: 'ip_vti0', set: '' [ 2143.221132] kobject: 'queues' (00000000bedef777): kobject_uevent_env [ 2143.227630] kobject: 'queues' (00000000bedef777): kobject_uevent_env: filter function caused the event to drop! [ 2143.237900] kobject: 'rx-0' (0000000047e23749): kobject_add_internal: parent: 'queues', set: 'queues' [ 2143.247304] kobject: 'rx-0' (0000000047e23749): kobject_uevent_env [ 2143.253688] kobject: 'rx-0' (0000000047e23749): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/rx-0' [ 2143.264191] kobject: 'tx-0' (00000000a848d2e7): kobject_add_internal: parent: 'queues', set: 'queues' [ 2143.273716] kobject: 'tx-0' (00000000a848d2e7): kobject_uevent_env [ 2143.280095] kobject: 'tx-0' (00000000a848d2e7): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/tx-0' [ 2143.291958] kobject: 'rx-0' (00000000706c276e): kobject_cleanup, parent 00000000624cf14b [ 2143.300602] kobject: 'rx-0' (00000000706c276e): auto cleanup 'remove' event [ 2143.307721] kobject: 'rx-0' (00000000706c276e): kobject_uevent_env [ 2143.315412] kobject: 'rx-0' (00000000706c276e): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2143.325680] kobject: 'rx-0' (00000000706c276e): auto cleanup kobject_del [ 2143.333887] kobject: 'rx-0' (00000000706c276e): calling ktype release [ 2143.340521] kobject: 'rx-0': free name [ 2143.344443] kobject: 'tx-0' (00000000c198bcc2): kobject_cleanup, parent 00000000624cf14b [ 2143.354104] kobject: 'tx-0' (00000000c198bcc2): auto cleanup 'remove' event [ 2143.361309] kobject: 'tx-0' (00000000c198bcc2): kobject_uevent_env [ 2143.367625] kobject: 'tx-0' (00000000c198bcc2): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2143.377683] kobject: 'tx-0' (00000000c198bcc2): auto cleanup kobject_del [ 2143.384980] kobject: 'tx-0' (00000000c198bcc2): calling ktype release [ 2143.391579] kobject: 'tx-0': free name [ 2143.395471] kobject: 'queues' (00000000624cf14b): kobject_cleanup, parent (null) [ 2143.403889] kobject: 'queues' (00000000624cf14b): calling ktype release [ 2143.410656] kobject: 'queues' (00000000624cf14b): kset_release [ 2143.416620] kobject: 'queues': free name [ 2143.420961] kobject: 'sit0' (0000000019634e01): kobject_uevent_env [ 2143.427274] kobject: 'sit0' (0000000019634e01): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2143.437957] kobject: 'rx-0' (0000000047e23749): kobject_cleanup, parent 00000000bedef777 [ 2143.446219] kobject: 'rx-0' (0000000047e23749): auto cleanup 'remove' event [ 2143.453985] kobject: 'rx-0' (0000000047e23749): kobject_uevent_env [ 2143.460505] kobject: 'rx-0' (0000000047e23749): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/rx-0' [ 2143.471159] kobject: 'rx-0' (0000000047e23749): auto cleanup kobject_del [ 2143.478229] kobject: 'rx-0' (0000000047e23749): calling ktype release [ 2143.484818] kobject: 'rx-0': free name [ 2143.488904] kobject: 'tx-0' (00000000a848d2e7): kobject_cleanup, parent 00000000bedef777 [ 2143.497132] kobject: 'tx-0' (00000000a848d2e7): auto cleanup 'remove' event [ 2143.504554] kobject: 'tx-0' (00000000a848d2e7): kobject_uevent_env [ 2143.510965] kobject: 'tx-0' (00000000a848d2e7): fill_kobj_path: path = '/devices/virtual/net/ip_vti0/queues/tx-0' [ 2143.521429] kobject: 'tx-0' (00000000a848d2e7): auto cleanup kobject_del [ 2143.528330] kobject: 'tx-0' (00000000a848d2e7): calling ktype release [ 2143.534917] kobject: 'tx-0': free name [ 2143.539195] kobject: 'queues' (00000000bedef777): kobject_cleanup, parent (null) [ 2143.547607] kobject: 'queues' (00000000bedef777): calling ktype release [ 2143.554403] kobject: 'queues' (00000000bedef777): kset_release [ 2143.560409] kobject: 'queues': free name [ 2143.564752] kobject: 'ip_vti0' (000000009f739fa2): kobject_uevent_env [ 2143.571401] kobject: 'ip_vti0' (000000009f739fa2): fill_kobj_path: path = '/devices/virtual/net/ip_vti0' [ 2143.581173] kobject: 'sit0' (0000000019634e01): kobject_cleanup, parent (null) [ 2143.589562] kobject: 'sit0' (0000000019634e01): auto cleanup 'remove' event [ 2143.596655] kobject: 'sit0' (0000000019634e01): kobject_uevent_env [ 2143.602996] kobject: 'sit0' (0000000019634e01): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2143.610207] kobject: 'ip_vti0' (000000009f739fa2): kobject_cleanup, parent (null) [ 2143.613073] kobject: 'sit0' (0000000019634e01): calling ktype release [ 2143.622870] kobject: 'ip_vti0' (000000009f739fa2): calling ktype release [ 2143.628207] kobject: 'sit0': free name [ 2143.638990] kobject: 'ip_vti0': free name [ 2143.643692] kobject: 'rx-0' (000000006afba4ee): kobject_cleanup, parent 0000000035ef75eb [ 2143.651983] kobject: 'rx-0' (000000006afba4ee): auto cleanup 'remove' event [ 2143.659144] kobject: 'rx-0' (000000006afba4ee): kobject_uevent_env [ 2143.665461] kobject: 'rx-0' (000000006afba4ee): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2143.675538] kobject: 'rx-0' (000000006afba4ee): auto cleanup kobject_del [ 2143.682399] kobject: 'rx-0' (000000006afba4ee): calling ktype release [ 2143.689000] kobject: 'rx-0': free name [ 2143.692908] kobject: 'tx-0' (00000000d9259a4d): kobject_cleanup, parent 0000000035ef75eb [ 2143.701162] kobject: 'tx-0' (00000000d9259a4d): auto cleanup 'remove' event [ 2143.708281] kobject: 'tx-0' (00000000d9259a4d): kobject_uevent_env [ 2143.714590] kobject: 'tx-0' (00000000d9259a4d): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2143.724647] kobject: 'tx-0' (00000000d9259a4d): auto cleanup kobject_del [ 2143.731521] kobject: 'tx-0' (00000000d9259a4d): calling ktype release [ 2143.738107] kobject: 'tx-0': free name [ 2143.742002] kobject: 'queues' (0000000035ef75eb): kobject_cleanup, parent (null) [ 2143.750414] kobject: 'queues' (0000000035ef75eb): calling ktype release [ 2143.757158] kobject: 'queues' (0000000035ef75eb): kset_release [ 2143.763138] kobject: 'queues': free name [ 2143.767370] kobject: 'ip6_vti0' (00000000aa1c712e): kobject_uevent_env [ 2143.774046] kobject: 'ip6_vti0' (00000000aa1c712e): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2143.785192] kobject: 'batman_adv' (00000000cc9c0a2c): kobject_uevent_env [ 2143.792461] kobject: 'batman_adv' (00000000cc9c0a2c): kobject_uevent_env: filter function caused the event to drop! [ 2143.803357] kobject: 'batman_adv' (00000000cc9c0a2c): kobject_cleanup, parent (null) [ 2143.812149] kobject: 'batman_adv' (00000000cc9c0a2c): calling ktype release [ 2143.819293] kobject: (00000000cc9c0a2c): dynamic_kobj_release [ 2143.825182] kobject: 'batman_adv': free name [ 2143.829762] kobject: 'rx-0' (000000007f215d64): kobject_cleanup, parent 00000000d31597f4 [ 2143.838032] kobject: 'rx-0' (000000007f215d64): auto cleanup 'remove' event [ 2143.845136] kobject: 'rx-0' (000000007f215d64): kobject_uevent_env [ 2143.851547] kobject: 'rx-0' (000000007f215d64): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/rx-0' [ 2143.862249] kobject: 'rx-0' (000000007f215d64): auto cleanup kobject_del [ 2143.869160] kobject: 'rx-0' (000000007f215d64): calling ktype release [ 2143.875750] kobject: 'rx-0': free name [ 2143.879825] kobject: 'tx-0' (00000000e729fae3): kobject_cleanup, parent 00000000d31597f4 [ 2143.888422] kobject: 'tx-0' (00000000e729fae3): auto cleanup 'remove' event [ 2143.895533] kobject: 'tx-0' (00000000e729fae3): kobject_uevent_env [ 2143.901920] kobject: 'tx-0' (00000000e729fae3): fill_kobj_path: path = '/devices/virtual/net/erspan0/queues/tx-0' [ 2143.912404] kobject: 'tx-0' (00000000e729fae3): auto cleanup kobject_del [ 2143.919314] kobject: 'tx-0' (00000000e729fae3): calling ktype release [ 2143.925902] kobject: 'tx-0': free name [ 2143.929833] kobject: 'queues' (00000000d31597f4): kobject_cleanup, parent (null) [ 2143.938311] kobject: 'queues' (00000000d31597f4): calling ktype release [ 2143.945071] kobject: 'queues' (00000000d31597f4): kset_release [ 2143.951077] kobject: 'queues': free name [ 2143.955328] kobject: 'erspan0' (00000000d50a46d7): kobject_uevent_env [ 2143.961983] kobject: 'erspan0' (00000000d50a46d7): fill_kobj_path: path = '/devices/virtual/net/erspan0' [ 2143.971740] kobject: 'ip6_vti0' (00000000aa1c712e): kobject_cleanup, parent (null) [ 2143.980380] kobject: 'ip6_vti0' (00000000aa1c712e): auto cleanup 'remove' event [ 2143.987950] kobject: 'ip6_vti0' (00000000aa1c712e): kobject_uevent_env [ 2143.988453] kobject: 'erspan0' (00000000d50a46d7): kobject_cleanup, parent (null) [ 2143.994616] kobject: 'ip6_vti0' (00000000aa1c712e): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2143.994623] kobject: 'ip6_vti0' (00000000aa1c712e): calling ktype release [ 2143.994648] kobject: 'ip6_vti0': free name [ 2144.005668] kobject: 'erspan0' (00000000d50a46d7): calling ktype release [ 2144.031700] kobject: 'erspan0': free name [ 2144.036274] kobject: 'rx-0' (00000000c087934b): kobject_cleanup, parent 000000005438ba95 [ 2144.044578] kobject: 'rx-0' (00000000c087934b): auto cleanup 'remove' event [ 2144.051703] kobject: 'rx-0' (00000000c087934b): kobject_uevent_env [ 2144.058031] kobject: 'rx-0' (00000000c087934b): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2144.068098] kobject: 'rx-0' (00000000c087934b): auto cleanup kobject_del [ 2144.074942] kobject: 'rx-0' (00000000c087934b): calling ktype release [ 2144.081536] kobject: 'rx-0': free name [ 2144.085439] kobject: 'tx-0' (000000003d926423): kobject_cleanup, parent 000000005438ba95 [ 2144.093687] kobject: 'tx-0' (000000003d926423): auto cleanup 'remove' event [ 2144.100833] kobject: 'tx-0' (000000003d926423): kobject_uevent_env [ 2144.107143] kobject: 'tx-0' (000000003d926423): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2144.117214] kobject: 'tx-0' (000000003d926423): auto cleanup kobject_del [ 2144.124128] kobject: 'tx-0' (000000003d926423): calling ktype release [ 2144.130720] kobject: 'tx-0': free name [ 2144.134649] kobject: 'queues' (000000005438ba95): kobject_cleanup, parent (null) [ 2144.143097] kobject: 'queues' (000000005438ba95): calling ktype release [ 2144.149873] kobject: 'queues' (000000005438ba95): kset_release [ 2144.155836] kobject: 'queues': free name [ 2144.160233] kobject: 'ip_vti0' (00000000ec3384fa): kobject_uevent_env [ 2144.166812] kobject: 'ip_vti0' (00000000ec3384fa): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2144.178226] kobject: 'batman_adv' (00000000e0190806): kobject_uevent_env [ 2144.185084] kobject: 'batman_adv' (00000000e0190806): kobject_uevent_env: filter function caused the event to drop! [ 2144.195823] kobject: 'batman_adv' (00000000e0190806): kobject_cleanup, parent (null) [ 2144.204605] kobject: 'batman_adv' (00000000e0190806): calling ktype release [ 2144.211832] kobject: (00000000e0190806): dynamic_kobj_release [ 2144.217732] kobject: 'batman_adv': free name [ 2144.222532] kobject: 'rx-0' (000000002e5b8341): kobject_cleanup, parent 0000000018227f9d [ 2144.230853] kobject: 'rx-0' (000000002e5b8341): auto cleanup 'remove' event [ 2144.238009] kobject: 'rx-0' (000000002e5b8341): kobject_uevent_env [ 2144.244361] kobject: 'rx-0' (000000002e5b8341): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/rx-0' [ 2144.254853] kobject: 'rx-0' (000000002e5b8341): auto cleanup kobject_del [ 2144.261831] kobject: 'rx-0' (000000002e5b8341): calling ktype release [ 2144.268467] kobject: 'rx-0': free name [ 2144.272402] kobject: 'tx-0' (00000000ebe5c8a0): kobject_cleanup, parent 0000000018227f9d [ 2144.280671] kobject: 'tx-0' (00000000ebe5c8a0): auto cleanup 'remove' event [ 2144.287778] kobject: 'tx-0' (00000000ebe5c8a0): kobject_uevent_env [ 2144.294185] kobject: 'tx-0' (00000000ebe5c8a0): fill_kobj_path: path = '/devices/virtual/net/gretap0/queues/tx-0' [ 2144.304650] kobject: 'tx-0' (00000000ebe5c8a0): auto cleanup kobject_del [ 2144.311567] kobject: 'tx-0' (00000000ebe5c8a0): calling ktype release [ 2144.318190] kobject: 'tx-0': free name [ 2144.322097] kobject: 'queues' (0000000018227f9d): kobject_cleanup, parent (null) [ 2144.330566] kobject: 'queues' (0000000018227f9d): calling ktype release [ 2144.337333] kobject: 'queues' (0000000018227f9d): kset_release [ 2144.343359] kobject: 'queues': free name [ 2144.347628] kobject: 'gretap0' (00000000c9ae76da): kobject_uevent_env [ 2144.354523] kobject: 'gretap0' (00000000c9ae76da): fill_kobj_path: path = '/devices/virtual/net/gretap0' [ 2144.364379] kobject: 'ip_vti0' (00000000ec3384fa): kobject_cleanup, parent (null) [ 2144.372913] kobject: 'ip_vti0' (00000000ec3384fa): auto cleanup 'remove' event [ 2144.380316] kobject: 'ip_vti0' (00000000ec3384fa): kobject_uevent_env [ 2144.386906] kobject: 'ip_vti0' (00000000ec3384fa): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2144.397233] kobject: 'ip_vti0' (00000000ec3384fa): calling ktype release [ 2144.404112] kobject: 'ip_vti0': free name [ 2144.410082] kobject: 'batman_adv' (000000006e1abb92): kobject_uevent_env [ 2144.416955] kobject: 'batman_adv' (000000006e1abb92): kobject_uevent_env: filter function caused the event to drop! [ 2144.428648] kobject: 'batman_adv' (000000006e1abb92): kobject_cleanup, parent (null) [ 2144.437409] kobject: 'batman_adv' (000000006e1abb92): calling ktype release [ 2144.444557] kobject: (000000006e1abb92): dynamic_kobj_release [ 2144.450535] kobject: 'batman_adv': free name [ 2144.455047] kobject: 'rx-0' (0000000069b6a2f9): kobject_cleanup, parent 00000000c034fd13 [ 2144.463320] kobject: 'rx-0' (0000000069b6a2f9): auto cleanup 'remove' event [ 2144.470441] kobject: 'rx-0' (0000000069b6a2f9): kobject_uevent_env [ 2144.476752] kobject: 'rx-0' (0000000069b6a2f9): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2144.487079] kobject: 'rx-0' (0000000069b6a2f9): auto cleanup kobject_del [ 2144.493984] kobject: 'rx-0' (0000000069b6a2f9): calling ktype release [ 2144.502372] kobject: 'rx-0': free name [ 2144.506295] kobject: 'tx-0' (00000000b24b71eb): kobject_cleanup, parent 00000000c034fd13 [ 2144.514575] kobject: 'tx-0' (00000000b24b71eb): auto cleanup 'remove' event [ 2144.521720] kobject: 'tx-0' (00000000b24b71eb): kobject_uevent_env [ 2144.528066] kobject: 'tx-0' (00000000b24b71eb): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2144.538243] kobject: 'tx-0' (00000000b24b71eb): auto cleanup kobject_del [ 2144.545103] kobject: 'tx-0' (00000000b24b71eb): calling ktype release [ 2144.551724] kobject: 'tx-0': free name [ 2144.555647] kobject: 'queues' (00000000c034fd13): kobject_cleanup, parent (null) [ 2144.564184] kobject: 'queues' (00000000c034fd13): calling ktype release [ 2144.571022] kobject: 'queues' (00000000c034fd13): kset_release [ 2144.577024] kobject: 'queues': free name [ 2144.581408] kobject: 'erspan0' (00000000abe3b069): kobject_uevent_env [ 2144.588027] kobject: 'erspan0' (00000000abe3b069): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2144.598452] kobject: 'gretap0' (00000000c9ae76da): kobject_cleanup, parent (null) [ 2144.606983] kobject: 'gretap0' (00000000c9ae76da): calling ktype release [ 2144.613915] kobject: 'gretap0': free name [ 2144.618572] kobject: 'rx-0' (0000000035ccc0c2): kobject_cleanup, parent 000000009100d44c [ 2144.626799] kobject: 'rx-0' (0000000035ccc0c2): auto cleanup 'remove' event [ 2144.633912] kobject: 'rx-0' (0000000035ccc0c2): kobject_uevent_env [ 2144.640256] kobject: 'rx-0' (0000000035ccc0c2): fill_kobj_path: path = '/devices/virtual/net/gre0/queues/rx-0' [ 2144.650491] kobject: 'rx-0' (0000000035ccc0c2): auto cleanup kobject_del [ 2144.657347] kobject: 'rx-0' (0000000035ccc0c2): calling ktype release [ 2144.663974] kobject: 'rx-0': free name [ 2144.667942] kobject: 'tx-0' (000000001a53f99f): kobject_cleanup, parent 000000009100d44c [ 2144.676164] kobject: 'tx-0' (000000001a53f99f): auto cleanup 'remove' event [ 2144.683275] kobject: 'tx-0' (000000001a53f99f): kobject_uevent_env [ 2144.689651] kobject: 'tx-0' (000000001a53f99f): fill_kobj_path: path = '/devices/virtual/net/gre0/queues/tx-0' [ 2144.699885] kobject: 'tx-0' (000000001a53f99f): auto cleanup kobject_del [ 2144.706756] kobject: 'tx-0' (000000001a53f99f): calling ktype release [ 2144.713343] kobject: 'tx-0': free name [ 2144.717235] kobject: 'queues' (000000009100d44c): kobject_cleanup, parent (null) [ 2144.725663] kobject: 'queues' (000000009100d44c): calling ktype release [ 2144.732440] kobject: 'queues' (000000009100d44c): kset_release [ 2144.738423] kobject: 'queues': free name [ 2144.742695] kobject: 'gre0' (0000000058d2a456): kobject_uevent_env [ 2144.749068] kobject: 'gre0' (0000000058d2a456): fill_kobj_path: path = '/devices/virtual/net/gre0' [ 2144.758303] kobject: 'erspan0' (00000000abe3b069): kobject_cleanup, parent (null) [ 2144.766819] kobject: 'erspan0' (00000000abe3b069): auto cleanup 'remove' event [ 2144.774280] kobject: 'erspan0' (00000000abe3b069): kobject_uevent_env [ 2144.780997] kobject: 'erspan0' (00000000abe3b069): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2144.787959] kobject: 'gre0' (0000000058d2a456): kobject_cleanup, parent (null) [ 2144.791343] kobject: 'erspan0' (00000000abe3b069): calling ktype release [ 2144.802068] kobject: 'gre0' (0000000058d2a456): calling ktype release [ 2144.806448] kobject: 'erspan0': free name [ 2144.813238] kobject: 'gre0': free name [ 2144.823560] kobject: 'batman_adv' (000000000ddf5e9a): kobject_uevent_env [ 2144.830438] kobject: 'batman_adv' (000000000ddf5e9a): kobject_uevent_env: filter function caused the event to drop! [ 2144.841074] kobject: 'batman_adv' (000000000ddf5e9a): kobject_cleanup, parent (null) [ 2144.849870] kobject: 'batman_adv' (000000000ddf5e9a): calling ktype release [ 2144.856964] kobject: (000000000ddf5e9a): dynamic_kobj_release [ 2144.862877] kobject: 'batman_adv': free name [ 2144.867362] kobject: 'rx-0' (000000008d43f960): kobject_cleanup, parent 000000003f2adb5e [ 2144.875606] kobject: 'rx-0' (000000008d43f960): auto cleanup 'remove' event [ 2144.882731] kobject: 'rx-0' (000000008d43f960): kobject_uevent_env [ 2144.889094] kobject: 'rx-0' (000000008d43f960): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2144.899158] kobject: 'rx-0' (000000008d43f960): auto cleanup kobject_del [ 2144.905988] kobject: 'rx-0' (000000008d43f960): calling ktype release [ 2144.912583] kobject: 'rx-0': free name [ 2144.916502] kobject: 'tx-0' (00000000fd95aeb6): kobject_cleanup, parent 000000003f2adb5e [ 2144.924751] kobject: 'tx-0' (00000000fd95aeb6): auto cleanup 'remove' event [ 2144.931860] kobject: 'tx-0' (00000000fd95aeb6): kobject_uevent_env [ 2144.938210] kobject: 'tx-0' (00000000fd95aeb6): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2144.948290] kobject: 'tx-0' (00000000fd95aeb6): auto cleanup kobject_del [ 2144.955141] kobject: 'tx-0' (00000000fd95aeb6): calling ktype release [ 2144.961730] kobject: 'tx-0': free name [ 2144.965620] kobject: 'queues' (000000003f2adb5e): kobject_cleanup, parent (null) [ 2144.974041] kobject: 'queues' (000000003f2adb5e): calling ktype release [ 2144.980832] kobject: 'queues' (000000003f2adb5e): kset_release [ 2144.986794] kobject: 'queues': free name [ 2144.991224] kobject: 'gretap0' (00000000f02a3d48): kobject_uevent_env [ 2144.997790] kobject: 'gretap0' (00000000f02a3d48): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2145.008676] kobject: 'rx-0' (000000003ae43283): kobject_cleanup, parent 000000002e5175d6 [ 2145.016903] kobject: 'rx-0' (000000003ae43283): auto cleanup 'remove' event [ 2145.024044] kobject: 'rx-0' (000000003ae43283): kobject_uevent_env [ 2145.030438] kobject: 'rx-0' (000000003ae43283): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/rx-0' [ 2145.040735] kobject: 'rx-0' (000000003ae43283): auto cleanup kobject_del [ 2145.047597] kobject: 'rx-0' (000000003ae43283): calling ktype release [ 2145.054212] kobject: 'rx-0': free name [ 2145.058169] kobject: 'tx-0' (00000000770be1cc): kobject_cleanup, parent 000000002e5175d6 [ 2145.066387] kobject: 'tx-0' (00000000770be1cc): auto cleanup 'remove' event [ 2145.073504] kobject: 'tx-0' (00000000770be1cc): kobject_uevent_env [ 2145.079849] kobject: 'tx-0' (00000000770be1cc): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/tx-0' [ 2145.090163] kobject: 'tx-0' (00000000770be1cc): auto cleanup kobject_del [ 2145.097031] kobject: 'tx-0' (00000000770be1cc): calling ktype release [ 2145.103634] kobject: 'tx-0': free name [ 2145.107526] kobject: 'queues' (000000002e5175d6): kobject_cleanup, parent (null) [ 2145.115966] kobject: 'queues' (000000002e5175d6): calling ktype release [ 2145.122742] kobject: 'queues' (000000002e5175d6): kset_release [ 2145.128740] kobject: 'queues': free name [ 2145.133016] kobject: 'tunl0' (000000005e34a8f7): kobject_uevent_env [ 2145.139552] kobject: 'tunl0' (000000005e34a8f7): fill_kobj_path: path = '/devices/virtual/net/tunl0' [ 2145.158471] kobject: 'gretap0' (00000000f02a3d48): kobject_cleanup, parent (null) [ 2145.167011] kobject: 'gretap0' (00000000f02a3d48): auto cleanup 'remove' event [ 2145.174438] kobject: 'gretap0' (00000000f02a3d48): kobject_uevent_env [ 2145.181043] kobject: 'gretap0' (00000000f02a3d48): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2145.191378] kobject: 'gretap0' (00000000f02a3d48): calling ktype release [ 2145.198245] kobject: 'gretap0': free name [ 2145.202791] kobject: 'rx-0' (00000000b346b2be): kobject_cleanup, parent 000000005de8ebf6 [ 2145.211060] kobject: 'rx-0' (00000000b346b2be): auto cleanup 'remove' event [ 2145.218347] kobject: 'rx-0' (00000000b346b2be): kobject_uevent_env [ 2145.224662] kobject: 'rx-0' (00000000b346b2be): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2145.234740] kobject: 'rx-0' (00000000b346b2be): auto cleanup kobject_del [ 2145.241650] kobject: 'rx-0' (00000000b346b2be): calling ktype release [ 2145.248271] kobject: 'rx-0': free name [ 2145.252190] kobject: 'tx-0' (000000000ebe4f19): kobject_cleanup, parent 000000005de8ebf6 [ 2145.260452] kobject: 'tx-0' (000000000ebe4f19): auto cleanup 'remove' event [ 2145.267581] kobject: 'tx-0' (000000000ebe4f19): kobject_uevent_env [ 2145.273922] kobject: 'tx-0' (000000000ebe4f19): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2145.284000] kobject: 'tx-0' (000000000ebe4f19): auto cleanup kobject_del [ 2145.291145] kobject: 'tx-0' (000000000ebe4f19): calling ktype release [ 2145.297733] kobject: 'tx-0': free name [ 2145.301690] kobject: 'queues' (000000005de8ebf6): kobject_cleanup, parent (null) [ 2145.310155] kobject: 'queues' (000000005de8ebf6): calling ktype release [ 2145.316899] kobject: 'queues' (000000005de8ebf6): kset_release [ 2145.322904] kobject: 'queues': free name [ 2145.327158] kobject: 'gre0' (00000000ee6daf00): kobject_uevent_env [ 2145.333523] kobject: 'gre0' (00000000ee6daf00): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2145.343682] kobject: 'tunl0' (000000005e34a8f7): kobject_cleanup, parent (null) [ 2145.352065] kobject: 'tunl0' (000000005e34a8f7): calling ktype release [ 2145.358773] kobject: 'tunl0': free name [ 2145.363413] kobject: 'rx-0' (00000000f6d2573e): kobject_cleanup, parent 00000000b68c73ad [ 2145.371762] kobject: 'rx-0' (00000000f6d2573e): auto cleanup 'remove' event [ 2145.380088] kobject: 'rx-0' (00000000f6d2573e): kobject_uevent_env [ 2145.386412] kobject: 'rx-0' (00000000f6d2573e): fill_kobj_path: path = '/devices/virtual/net/lo/queues/rx-0' [ 2145.396465] kobject: 'rx-0' (00000000f6d2573e): auto cleanup kobject_del [ 2145.403344] kobject: 'rx-0' (00000000f6d2573e): calling ktype release [ 2145.409950] kobject: 'rx-0': free name [ 2145.413865] kobject: 'tx-0' (0000000049c1ce91): kobject_cleanup, parent 00000000b68c73ad [ 2145.422103] kobject: 'tx-0' (0000000049c1ce91): auto cleanup 'remove' event [ 2145.434242] kobject: 'tx-0' (0000000049c1ce91): kobject_uevent_env [ 2145.440627] kobject: 'tx-0' (0000000049c1ce91): fill_kobj_path: path = '/devices/virtual/net/lo/queues/tx-0' [ 2145.450826] kobject: 'tx-0' (0000000049c1ce91): auto cleanup kobject_del [ 2145.457665] kobject: 'tx-0' (0000000049c1ce91): calling ktype release [ 2145.464258] kobject: 'tx-0': free name [ 2145.468193] kobject: 'queues' (00000000b68c73ad): kobject_cleanup, parent (null) [ 2145.476583] kobject: 'queues' (00000000b68c73ad): calling ktype release [ 2145.483341] kobject: 'queues' (00000000b68c73ad): kset_release [ 2145.489335] kobject: 'queues': free name [ 2145.493586] kobject: 'lo' (000000001f8efef4): kobject_uevent_env [ 2145.499777] kobject: 'lo' (000000001f8efef4): fill_kobj_path: path = '/devices/virtual/net/lo' [ 2145.508717] kobject: 'gre0' (00000000ee6daf00): kobject_cleanup, parent (null) [ 2145.516957] kobject: 'gre0' (00000000ee6daf00): auto cleanup 'remove' event [ 2145.524245] kobject: 'gre0' (00000000ee6daf00): kobject_uevent_env [ 2145.530615] kobject: 'gre0' (00000000ee6daf00): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2145.537959] kobject: 'lo' (000000001f8efef4): kobject_cleanup, parent (null) [ 2145.540718] kobject: 'gre0' (00000000ee6daf00): calling ktype release [ 2145.552154] kobject: 'lo' (000000001f8efef4): calling ktype release [ 2145.555346] kobject: 'gre0': free name [ 2145.562052] kobject: 'lo': free name [ 2145.570966] kobject: 'rx-0' (0000000000c57867): kobject_cleanup, parent 000000007d905707 [ 2145.579230] kobject: 'rx-0' (0000000000c57867): auto cleanup 'remove' event [ 2145.586330] kobject: 'rx-0' (0000000000c57867): kobject_uevent_env [ 2145.592672] kobject: 'rx-0' (0000000000c57867): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2145.602737] kobject: 'rx-0' (0000000000c57867): auto cleanup kobject_del [ 2145.609670] kobject: 'rx-0' (0000000000c57867): calling ktype release [ 2145.616250] kobject: 'rx-0': free name [ 2145.620192] kobject: 'tx-0' (000000009849ae00): kobject_cleanup, parent 000000007d905707 [ 2145.628444] kobject: 'tx-0' (000000009849ae00): auto cleanup 'remove' event [ 2145.635530] kobject: 'tx-0' (000000009849ae00): kobject_uevent_env [ 2145.641856] kobject: 'tx-0' (000000009849ae00): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2145.651915] kobject: 'tx-0' (000000009849ae00): auto cleanup kobject_del [ 2145.658793] kobject: 'tx-0' (000000009849ae00): calling ktype release [ 2145.665365] kobject: 'tx-0': free name [ 2145.669288] kobject: 'queues' (000000007d905707): kobject_cleanup, parent (null) [ 2145.677680] kobject: 'queues' (000000007d905707): calling ktype release [ 2145.684439] kobject: 'queues' (000000007d905707): kset_release [ 2145.690420] kobject: 'queues': free name [ 2145.694655] kobject: 'tunl0' (00000000bbfab3d2): kobject_uevent_env [ 2145.701119] kobject: 'tunl0' (00000000bbfab3d2): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2145.768179] kobject: 'tunl0' (00000000bbfab3d2): kobject_cleanup, parent (null) [ 2145.776525] kobject: 'tunl0' (00000000bbfab3d2): auto cleanup 'remove' event [ 2145.783760] kobject: 'tunl0' (00000000bbfab3d2): kobject_uevent_env [ 2145.790382] kobject: 'tunl0' (00000000bbfab3d2): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2145.800560] kobject: 'tunl0' (00000000bbfab3d2): calling ktype release [ 2145.807258] kobject: 'tunl0': free name [ 2145.811935] kobject: 'rx-0' (00000000e7d1825a): kobject_cleanup, parent 00000000aed7fcb9 [ 2145.820192] kobject: 'rx-0' (00000000e7d1825a): auto cleanup 'remove' event [ 2145.827294] kobject: 'rx-0' (00000000e7d1825a): kobject_uevent_env [ 2145.833850] kobject: 'rx-0' (00000000e7d1825a): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2145.843958] kobject: 'rx-0' (00000000e7d1825a): auto cleanup kobject_del [ 2145.850987] kobject: 'rx-0' (00000000e7d1825a): calling ktype release [ 2145.857577] kobject: 'rx-0': free name [ 2145.861577] kobject: 'tx-0' (00000000affcce13): kobject_cleanup, parent 00000000aed7fcb9 [ 2145.869850] kobject: 'tx-0' (00000000affcce13): auto cleanup 'remove' event [ 2145.876961] kobject: 'tx-0' (00000000affcce13): kobject_uevent_env [ 2145.883325] kobject: 'tx-0' (00000000affcce13): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2145.893409] kobject: 'tx-0' (00000000affcce13): auto cleanup kobject_del [ 2145.900335] kobject: 'tx-0' (00000000affcce13): calling ktype release [ 2145.906927] kobject: 'tx-0': free name [ 2145.910867] kobject: 'queues' (00000000aed7fcb9): kobject_cleanup, parent (null) [ 2145.919647] kobject: 'queues' (00000000aed7fcb9): calling ktype release [ 2145.926416] kobject: 'queues' (00000000aed7fcb9): kset_release [ 2145.932426] kobject: 'queues': free name [ 2145.936877] kobject: 'lo' (0000000014987ab0): kobject_uevent_env [ 2145.943077] kobject: 'lo' (0000000014987ab0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2145.970285] kobject: 'lo' (0000000014987ab0): kobject_cleanup, parent (null) [ 2145.978400] kobject: 'lo' (0000000014987ab0): auto cleanup 'remove' event [ 2145.985339] kobject: 'lo' (0000000014987ab0): kobject_uevent_env [ 2145.994119] kobject: 'lo' (0000000014987ab0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 2146.004257] kobject: 'lo' (0000000014987ab0): calling ktype release [ 2146.013267] kobject: 'lo': free name 15:30:46 executing program 5: setxattr$security_capability(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.capability\x00', 0x0, 0x0, 0x2) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000180)) r0 = fcntl$getown(0xffffffffffffff9c, 0x9) r1 = socket$isdn_base(0x22, 0x3, 0x0) r2 = socket$inet6(0xa, 0x801, 0x5) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) r5 = syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x7, 0x80000) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000b00)=ANY=[@ANYBLOB="08000000000000001f000000000000000500000000000000", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="00000000018000000000000000000000000000000000000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000000000000000000000000000000000000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00J\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="4006000000000000cc990000000000000000003a244f1c667cabcc1cdfa600f3928a60aba78af62d61e94bd1e7f09dd4d4303927e70b0f1035ab3c4d0df06ae273e31e20ab35054e8866704ed71c4727b74ff51055b6f9137d4a91a8de67ceceab8761f2d3b52eec4ccfd25943e856d90443b23688a4182fd61da107b62944c81196c1271e8593b0ead87a61708d53b1c2441ebdf13073629388ca5e4409cd4870a4f8d6ec355c47d5e1"]) r7 = syz_open_dev$cec(&(0x7f00000004c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$KVM_CHECK_EXTENSION_VM(r7, 0xae03, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x0, &(0x7f0000000380)=""/93) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x0) getresuid(0x0, 0x0, &(0x7f00000001c0)) socket$xdp(0x2c, 0x3, 0x0) r8 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_STD(r8, 0x80085617, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000a80)='keyring]\x00'}, 0x30) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0x0) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000540)={[0x0, 0x1, 0x8, 0x4, 0x1ff, 0x3, 0x39aa, 0x1, 0x400, 0x2, 0x8, 0x101, 0x100000000, 0x100, 0xc8b3c02, 0x100000001], 0x3000, 0x40200}) prctl$PR_CAPBSET_READ(0x17, 0x1e) ioctl$EVIOCGBITSW(r9, 0x80404525, &(0x7f0000000240)=""/114) unshare(0x40000000) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r9, 0xc0305615, &(0x7f00000000c0)={0x0, {0x1}}) syz_open_dev$loop(0x0, 0x100000001, 0x0) 15:30:46 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x27, &(0x7f0000000080)=0x1001, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000100)={{0x2, 0x4e20, @multicast2}, {0x6, @dev={[], 0x21}}, 0x40, {0x2, 0x4e21, @remote}, 'vxcan1\x00'}) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x1) 15:30:46 executing program 3: ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x9, 0x101, 0x6, 0x40, 0x8, 0x5, 0x745c, 0x4, 0x3ff, 0x6, 0x10, 0x4}}) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x2b) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x1) 15:30:46 executing program 4: r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff8e) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) readahead(r0, 0x4, 0x1f) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file1\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) 15:30:46 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 2146.398628] kobject: 'loop5' (000000002f6317bf): kobject_uevent_env [ 2146.427983] kobject: 'loop5' (000000002f6317bf): fill_kobj_path: path = '/devices/virtual/block/loop5' 15:30:46 executing program 3: ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x6, 0x40, 0x8, 0x5, 0x745c, 0x4, 0x3ff, 0x6, 0x10, 0x4}}) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 15:30:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000001c0)=0xc) shutdown(r0, 0x1) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr=0x100000000}, 0x10) [ 2146.477705] kobject: 'loop0' (00000000e1a16639): kobject_uevent_env [ 2146.517883] kobject: 'loop0' (00000000e1a16639): fill_kobj_path: path = '/devices/virtual/block/loop0' 15:30:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x2b) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @sack_perm, @mss, @mss, @timestamp, @sack_perm], 0xeb) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) shutdown(r0, 0x1) 15:30:46 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c000000], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 15:30:46 executing program 3: ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x40, 0x8, 0x5, 0x745c, 0x4, 0x3ff, 0x6, 0x10, 0x4}}) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 2146.525192] IPVS: ftp: loaded support on port[0] = 21 [ 2146.536371] kobject: 'loop3' (00000000cecf427d): kobject_uevent_env [ 2146.563714] kobject: 'loop3' (00000000cecf427d): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2146.623063] kobject: 'lo' (000000002476c632): kobject_add_internal: parent: 'net', set: 'devices' [ 2146.640523] kobject: 'loop1' (0000000081728edf): kobject_uevent_env [ 2146.647037] kobject: 'loop1' (0000000081728edf): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2146.660498] kobject: 'lo' (000000002476c632): kobject_uevent_env [ 2146.662762] kobject: 'loop2' (00000000418dbd4d): kobject_uevent_env [ 2146.681498] kobject: 'loop2' (00000000418dbd4d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2146.683616] kobject: 'lo' (000000002476c632): fill_kobj_path: path = '/devices/virtual/net/lo' [ 2146.693497] kobject: 'loop1' (0000000081728edf): kobject_uevent_env [ 2146.709727] kobject: 'loop1' (0000000081728edf): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2146.720791] kobject: 'loop2' (00000000418dbd4d): kobject_uevent_env [ 2146.734315] kobject: 'loop2' (00000000418dbd4d): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2146.754169] kobject: 'loop0' (00000000e1a16639): kobject_uevent_env [ 2146.761305] kobject: 'loop0' (00000000e1a16639): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2146.767589] kobject: 'queues' (000000000b02f774): kobject_add_internal: parent: 'lo', set: '' [ 2146.777774] kobject: 'loop3' (00000000cecf427d): kobject_uevent_env [ 2146.792449] kobject: 'loop3' (00000000cecf427d): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2146.798595] kobject: 'queues' (000000000b02f774): kobject_uevent_env [ 2146.803330] kobject: 'loop4' (00000000d2aa5d9a): kobject_uevent_env [ 2146.817270] kobject: 'queues' (000000000b02f774): kobject_uevent_env: filter function caused the event to drop! [ 2146.817575] kobject: 'loop4' (00000000d2aa5d9a): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2146.829659] kobject: 'rx-0' (000000007b75dde3): kobject_add_internal: parent: 'queues', set: 'queues' [ 2146.863202] kobject: 'rx-0' (000000007b75dde3): kobject_uevent_env [ 2146.874523] kobject: 'rx-0' (000000007b75dde3): fill_kobj_path: path = '/devices/virtual/net/lo/queues/rx-0'