ffd8c12430bc60eabe7d870b3b599a885c3d356f525ff3f5a79b0178877e914ff8fcc64eaee4def89ab53af6428b3bf9fe590109bf0fdbbeb876181c4978699220f6931e0c3e6d0adfc1ee79517b2983a55f4bb1754eaefdd8699eb01ff463e6fd43d98258e9e7e8ef0b89872549d4f4c17db65dff860000da4c71e9084e2502cc7c68b3cf3990b2ddf810f175f1524954aa6e61c583786ff25c3def2a33877550b007fe13e8a5b335c88ccd0cc038adf990b809910c761ac65be17ddd72bf08e8eda9bb6a275624bc5f33a451df3ac7f263c38fc4ecb057d77fa1e00e0b3c35c8e829cc8ef99ab018261d8a7b21acb240d4fc595ad724717d77308e4b92ef36d3b1ce91b24d266a39afa6a39fbcd4a00cd8e594c27e66c7b569a66c5f148dfe5c5366f2af2b7f21fc4705a89d9d61b9885dbe80fd2290e45689c90c6e1dccdf6a63d5ae22b80f799dd4bce8455400edbf74f5354957ea97580c12155b90b9d9b846c383e55c56ab8f6c92114a5f8d196059e7186bfb565146efe2d7a18d477895e3dc62979a50ed1dfbb5633ae81b482a651eb6692e81d933690a2aa24bee0b13f4a05c953c265f419217c9a8c575373fd7f230e3f006e31f2fbfcb6f7d362245322996f3ad7bfa07993032647dbd620b464aeaa00d967142d8e35e066eb86ea9f7e162669cf8cc3d26a00a0fa19282dc833bff6f4956d4ec4722389b4cdcf077a5af6205f746b03a40747e2e4fdb0b695da0871fc23cc5d9ebcad4c6936c1e50801f05be85adebb6e06a0094520e55d8c267ac7c12e5cc5906772cf6143bc58f47b58d2048a836de9957a2f83603ac78c3fabc90859e06b2e35241781c0df0b6709925f1ba32a914df075d7ef6190606fdb625e3d9420e4690d5198feb9f8616269885fd4af3e10681d63552ed7735d1a6ed9b62635919633607feeba48a4c3ecd832af4d63951ab11e26b95dbcf936a5fa615ab343a0ec8e05237be0cac727b195a5b2adbe8e5ee98b6e5053461f79ffb80191d03be463679823880997079ee73fa0a1430b0646953da695f68a81d090859a6e5ef0cfb187b15ca3d9716e332d4715fe804fc9c9d69143f08d3fad6913fbf407e7c120d1c1bbe51e0dd48c3f903190abe75e6e9250d901cb4015b6e72140fe3e26edd756b58c0681bc097c73e028ef69606d2fde27690e24ea2c68c9a8ba1105454ca15ae0f279335e77cd75e4755bcf9b6efd7b65986f1fe5cbc1ac99c156ba45871e802bb4b56620cf475697df0654152fb3e454c3972a6f19517d3d4b795b89e2f4a6adf8e44532fbce1a9b745105371ece6fe101e5d52ec8239b123f2dc72ef6d815dcd374dfc5fa587ea3de39b6201efc97b5af19c874b261ccc5221b656712d2fc5c16068625cad07eb7c5e27b37df0cc31ebecbd209bd1aaeefd3a53389609f3cd738e7ca54d63cc01b964eee31c3e5e8d3034be9fb2ce46cb2505554feee80bcc5d3473ac3ef63008bad6a2edea7619a64c4e22cf9e4f540a33fdb90844e739c2185b968b7c60055663767670eb3b0aac0b62d009ae43744a7a01ee3ffcebbf4514bf2c3f2b934e3249eda7079b04f466228d55d310e2d6350ece757f268cb9b3813e4d956a6b0c9ad891c3e1423428c86ccbdfb86052cd37d11a6c88371f5444bc693f86e2b7246f9951e7ee50d50de3c272767a56cc35a5a463e595e1789fca5061966950dd38ba5a59e486a5888260651ab6341555bc759053c764a400265a5064817826c13c4364e82f014a5233b1abf6c355d9827eaec917c08b0c97540249eac861aad8106872182f3961e7a505bfef245864d0de1bb7cf00231d1b073edf77f2cb3c3549601580303128d4d694733249a81e36962b98d3e3a6ac20ac932884cecc30182dd7f44e01e9c8a9508d9c71bb0f2389791db01a5c557dd65375b1d5a07720817658bbd9e9f32c8979186953b8002a02347de18a6c1329a8110014846e332bd4ebe94e098ceb661fb1c7439de24ef0d8ed109abc8432cec7af8198d4d790502790dfc6c7b0735b2501cad5aeb7d25d7f51a000a9b64ca866731d1b55a86de72e2a8cfb516d9c85c92ef941425ff3256ba6c4cfb5fe4cf89d9b4dbbbb7cb3289acf2a6605a51a6fe2557293c31b831d4ea5010afa90bd2084cd134fe049e312cb3c25f3e96b3277f3857410973da4e3e499446b5e8b1ea6f345724cfdeb740dfccb0bff43311202e69652307c0f3de158f1ab91dbd6a16e58aa9804eb94a65516121289b08761a77862987fe5a56aadeb071b02577697e3bc76d41c1926f862ef8", 0x1000}, {&(0x7f0000000640)="efd6893dc6393ba70656345674cab6e1129d8eb2845d65cdcfff7065a1aef4484784689335e6d5e47440", 0x2a}, {&(0x7f00000017c0)="f2fd6f711c1d29fd1da22ea296eaef62f4097113d6f6dd963bae468ee75e3c4721ad1b4f7bd5f0a7a267a01ede3659ba19b9da7b151519ccca59a6138c940cd53295b70d084294f8ca0279ed7ca5e31f67f6693a730812155f8098b73ed15f5c29044d28ddc39b43711dbc35a0e3a41ae3e62e2d8f1822e688f85c66aa0bf5860d099d97f5cbb17bde5d5b6f09e822caee39e5fd530972963aa8cf331f0d9ca626b6fc6a7e5123930e6b6c1e4260f2d9c5683b0dd10f3a21a469ed8317e28d3b4eb2a4a4b9408fb7aac8338475032be4379233180d88f98c236b340719bd9410b32f192d21a839b0b330bbd3ba1988ed7622b9e5252adc1ccc908a6851e3", 0xfe}, {&(0x7f00000018c0)="3c3383b147735c676e22d0384249047d36de8d0ea7b332d7e4bdde94ce81813ef5ae366bb45b14f158084d00f075a2d2de4cbb82436d822d37a321207e59a198325f9cadaf962ace13a0894549e3cb69132d85c46a3eb06c04e1", 0x5a}, {&(0x7f0000001940)="33b52913beac665f820a2fedcd12bc404a6d599580545d9014b8f0cc09395b77d8be1bed8192f7158054b73e53e2451ced9d56c31f775f515ea010f2835aa25fa28f17e998c9cddce22671f6609a65a8b98f4d86104e107d777abc4b9d2450164a42e9751247e0d95b0b55a36e8bb443964f9b8d4958cc3879e6f8b33c0ed3b44cbf2bed7be4027dbd", 0x89}, {&(0x7f0000001a00)="49ec47f88945d0a7622a4d4f119ed4baf0aeb1cfa8a2a694df23fb0bb5869d1a4ad4cda245fbf1f645aa9e28cd9de466c8787b16f2bbb4a3ad480c496e207499772c65c3c634a969e584bfa87a9450985f5f8157654058b4f0ea4a35c8cae7fa06a391861f0896e179e40541e57c00b387e0516c47d5c9d8844aa3ee685b529ba67788ccec28be9a2695a343f5bdb8757bb570f9876b1a74e4fb2a4d37b61f91eae76fb532f278f56997a711e24bad5e52df7752f120320dd128b9f34928a389e0ff00857f0a8580240cd1dff242a70aad9e6cc505e2939aafed11acc0e89878813e07f4312d2917a2a16003c0e404b10a18", 0xf2}, {&(0x7f0000001b00)="a35938243e237db45744542346f6f57e3af810eaceee7513f7f97f2669f9e39eaffbcc12e17c70e21f0a40d9320fa3a86e0be1a1b033352c59ef8a9e62b75ade94ad959bfeea2de0776618eb3e7ba6fb2a4de8bcbbd005d6928ca8a090e9fad47a63c296072cf8592ec50b6c19780a44db63119915152652955b726357866b4f7a44ca652b2b799e4deb2284c0229a71c50ba76692f156213f400f7a3b460a4d2a1e6cd09249fe58e716c1c37ca5e69b5a4a6730673f97d064edc3b20a65c956cb24d89216473e3cb15e", 0xca}, {&(0x7f0000001c00)="295a1d5b335f939593f8a4b62d8527bd89343aa81e442d8a6c54e9212f751c69dfb6325f7814ef0d7d2564b1b4a1b1dcb6e0b24c1babaa9ab7e0577823579350358447206778af8490811dc54ac7aec5a59985952491d9b7abd09c85ee591a8b12b372ec360b1a235ef3eb9f6ba764294959e691e31e29828a8f4182fd5e1652a64daa7921f7ed67376413d92aa326bef2c8662617c9cc", 0x97}], 0xa, &(0x7f0000001d80)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x3}, @iv={0x48, 0x117, 0x2, 0x2d, "e8b6ba1ee821adea7042359520caacefafa54630facc67407089740354f91782b3b39affd715552669b9ef72dc"}, @assoc={0x18, 0x117, 0x4, 0x8}], 0x90, 0x20000010}, {0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000001e40)="3ac493a980752145d30b27f30e3a527a9c0862b85ff466449185d2edad9ebc97572cbb3c64e62e39047130e734b7a93684fb53f652d4fcaf8a755cf94344d9d0ce6212a297ab2a8d6266224dd45d0f195bb5db84429e892192e8d22b41844252ac992c05d675370ba226a4792d38a16978daaac14f2bc7af4a24a40a16489eab979e13438f9bf7865018950686e5f92c", 0x90}, {&(0x7f0000001f00)="8317ece66c1d7a8710a986bf89854a7345330876adfc70f103b1463611e4ebbb572d4de91db471025f370197ba344c854f06aa3f8ecb27233a7035a76854395da16ec2e8cac2918fb9cc11f368ca4d249c7a4e07fe8bd96015d50b885f3134707e9a9ef216a5d33fa30e2574c077b2f2023e794726dad387a2b9290a1e8993f259b4ec8e995018e78a05a85067a1ee9dbd2ac24cedb0e0ff17b713cae811f579a65ee8a750d376363b8f9a4a9b8ca53b9406cd1042b9d89f7a6614d722cf264929645b27d074fec16cb404c44eb12b19c947f5a9efebe9b3f703d49b", 0xdc}, {&(0x7f0000002000)="4a8a52be0c6165c082d7d9c0ce34611c91d84676e850e385cdc24e43d30a0081c043b8ab05d63d82770e1a76f2775234d09124c9c99c4dd0c6a3bb5421766addc2969dc758ab314490587c61cac69202b1061fdc138fb6390627f011b9438bd1d174a8213652413d1359468b58065c3fd9c949d3eb3224a92373d7f6947ef70ccf21fa90a0ad4b3552810cc372bfc3440e9b21c05de4de0cfa566cdbe4ad4fce3877d8d360d0991977a969a50d615c20c1db0f6f0a77bafd0357cd3a3d71314ddd4d6371f346b9172170a12c171fe128772d5af9e77e66299c9ff57f0c26fb033b144c42ad0f4ff8", 0xe8}, {&(0x7f0000002100)="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", 0x1000}, {&(0x7f0000003100)="57c6f49ff634f23c462eafa9be9695f3d3d881337e3e98776ac7a15adb5158f5226dced47c5f3c30188ba80ded8326fd8ffd8684b7f9c3620e7d5b0d5358eddc9bbd8eb85279ec3f2b3d402ecbff7728f652e608d7cce5e6d87bd9cf0abedfcf76e74a12cb7853199514584cbfb9c96bdb78eaeca738dee92380e49c9d09823efbe0", 0x82}, {&(0x7f00000031c0)="745921f380d35f5e198a48cfa6d48733099a6402c5364c3fe5f3ef237421e1bf9ea2acfc29d2dfb63f370be488fc8bf8f4c245284a3179dc53f9887d04355b129ac9433aa7067b9ac2911798e454c7a2e1556238bb913605691fe6e7a0f9f116e10c0f34a669ca2007c1780d5b45f6c678855051b7813805194fe37156671aef7ac26bd96f0416e5b1dfdb86acd9a8ecd656918d", 0x94}, {&(0x7f0000003280)="420f973cf9a8da6a603ada961d7391d682d250c6f7c89fcbf23e32582b9e2b67e1a758631d8bbdb882dac2aa3ac021746a7199498bf646f70ee12db997cd412420347aa757aaa9e00bee67cc1006c9109f9bee8ccd920f660580d48ae6c7f823a0a41c7624377705676534d9dc0adaf250afe48cc8ae4a8801e22ca4a2851dd0030a3701c552c73fa341e34599fb4ed5a6fecd4a8ed7915748ea444dad7c869a0c8e5b5733dca89fae0b94488385356a0d0715767ec52197a58d865ee57e9ef63fcfc83cc14893e030d9136063abbd8d85090488", 0xd4}, {&(0x7f0000003380)="cc559862d1e7af6ab0cd355fcddb083b7417961ffb679747afcde15ebecd6dc97908c974e20e84fc41", 0x29}], 0x8, &(0x7f0000003440)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x108, 0x117, 0x2, 0xef, "9b848c0356b7f496efe67b4aef59aaee561f1222f3abf2c325114d62d5aa3c3e4756a0fe4ba679bae659e7749585acde97f2331d7366f4f00f7f953d2b001e73e8477600bab6284d80d9dd271fa366d193b260a461f79111f99b678cc542b0ed168fd4e5a6c6a2ac73aabb2efe2bc8435638172e4a3e8b7f4956679d01ed2158e1e3b3e9d07a322d53ac5a9e0c8928bcc172cb599485ce4431d9e95cd09c04d96106c84653d6f937cf1ec950d78cf5b8c96822d3738f451156275ab60cfeaf7adfb8ddfd0fc91898e296cfc7e9ca3d15259af8fc7279f927fc9cd4e96bf7455ffaba8e20f005414456d7943468d9dc"}, @iv={0xb0, 0x117, 0x2, 0x99, "102303c66adcc303c8db13d20daf8a14ff9603342f1fc67665a38f91dbc6aa2cbb916d769edb37e8d8912cfb68df95bfea3329b424001f6b0714da5bfa8ef5c98ea5179b89ea114d74d6ef58f1854e9c0819ce52417a9de92781138292abfa6a1bb90f51f321f55a433d61f93984452589e277b2bd88d9996759cbf89adc8b42f6b58dff29c03831623e09c1d5020378ac819fe4881676904d"}], 0x1d0, 0x40014}, {0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000003640)="fc8c658d735539c28a826af582119bd7413fefdca526eba05a2968eb704d1d6e472330b50b66d2c3a45a7382581c0dc0a1b05b9939a251fffd89e00846cbddeba9d57309cd10d71174709efa40c388ff8ef31dd3af45f2db81549baf4c5c7520ff764240fd2260cc7b031e2b183de8a2e59b6e699a30f22e280a3e66cc70f1685a57957ca3f13e7168ba409b71fe18cf60b52e2a8ecd508eff70b8698982ff095bdf1eabf95662253d785b8776595758dac67ca0643bff0a4addab30553463179e9763f9a2722e30866e717003e8e30871a432960ce790", 0xd7}, {&(0x7f0000003740)="7c8e6975e39927fb3d030736e2322b40425b06b90f1a1fa6f7c3b6a06df437951fe893d497960bcd79769da390009c23c18a4697a263b424ab09f345e9eb232fe46286940b373e", 0x47}, {&(0x7f00000037c0)="8d923d7a753fd02e8d1dc1c72a76215c7d4ebd0adad2a4b10ed76564273fb249bb918435b3e6595b3a741f894548e1fc3189", 0x32}, {&(0x7f0000003800)="ce0524c985f561e8eac4b9d889a7f8a3c8a772a9832c93e94f4dcf35b5ecc8ee4e77ae70299410fc9ba76c181410ab0b261a087e64538737214160bab917d96a642cb99599fbb4a44921266feec80a1d2060bdaaced9d69d8f48f888409bfb36607b22f2531c5a21b6da4eae13c51409e0e1e06075fada7c4227f5d4681c5beb18dbe80edf1fcce003d12effeb7d4f8d8a7131b26a944ea03cd698fe952cabc0d158dde5f1cb5d8ef6954fb53cee0afd506372290d7281be8de1fb09489dfa1b5632137e678dfca6f285a443778a0f7506a696200e6da49e9798fdcd", 0xdc}, {&(0x7f0000003900)="712acdd0584d55f22a687fe332805235b65c728939254ef6b29dbde1f074b7a73c8705a37dc54c1c16abd655526b4c5ccc47c38736645c37a1d8c769e0c32a01220cb318bfc7f274b61a0559350878902261d1cfca7ee936c05835e10f6a140d34ec2e61d45c4ffd5dab2b0e7091ca8c4a095f6d7d1d9889a8c11dd06b61c9", 0x7f}, {&(0x7f0000003980)="cfac1a20efd84ddfd0461be80d17ff558c9460daf502f58f20747fa042ed1f4847ad5051dd543112becbe613da85152bb34de627ae7f810f2d60fc4f7a7cc045f3fbb4b273ef2ebfe8cfee60bb69241c59ce373c49a5230b96f98ab54639e7a980b9a68c2510192187836e387923688dc736fb616fffa1d988928cd31be256f294100c03a895a0dc9ba033b09c49c0b386d38a68687599212c3683a07589cad645065dd1bb59c32b135b84807554cafe124b3b20290040c1b4", 0xb9}, {&(0x7f0000003a40)="576f8bb1a94a1b429b9a04a60b55fc1e3d9f40f33b4035808f1cead87782a8f2125363c713e0a730e3117572a1f173939fc7f38e4869d6f3e69545", 0x3b}], 0x7, &(0x7f0000003b00)=[@assoc={0x18, 0x117, 0x4, 0xc1d5}, @assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18, 0x117, 0x4, 0x101}, @iv={0x90, 0x117, 0x2, 0x79, "3046b4d8279baf06fc07b1fb657703fdbef4ebf29d9dfc3889904b4d143951c512a3d9157672727884fded45e942e548e7e1dc52c9a3359c4ec45a989d20039ec98d89107f77b770108a5bf1caa03e4b2154966a5cfd5a440d4fc9501ac889e12fa066a15240165cec8a93643c4475d5151a2d50027208887e"}, @iv={0xc0, 0x117, 0x2, 0xa9, "6dc824477aa15249d177749935605b5d1b18916bc455c5f66b2e71e17272aa73d92e486e13cf5279e7a4271da3217b90aafd1190b3c91cd0f3c666f741264acc763247c95989e73a329da4d8bf1a9eaeca0dc3938e8b73b98569bbaa03fa27c9b0d6504d05f52695ae335491652a3adc4ff932c62e220ffc401b94f9c8e39fa7ed1dd7648d4eaa215a3bd75cb985137d79c51eeb4023ba6bf32cf4e40e7598d45d3746ce7ba82bab4b"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x98, 0x117, 0x2, 0x80, "3a429b252161a036c0a180e20a4e8a374e48af6366806b8514e674a0fe180eb8516dcd1dbfb865d6f050bdd3591da15b4656349f2617568cf97c72d9e54f3de8996176da320cf598b3110bfd6fc70fa98fef915cfdc39aaf5f30d204d8f887e3ef61c4d8f9ed918008b94663faf0c9807974e6c9a70dfbe9010228fc96b9ab92"}], 0x248, 0x20000000}, {0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000003d80)="9b6e2895561d45e31e71330cf122c9bea97b58f3ca5d08a1bf0a4254cd011e8717cd3ed8885b645e6251e14dfbf6010cdbb1a03e4a7984f29ff5dcae1ec14feac1c28ed812db7f05da61446de6572350bef5e530351f532b589768f3a629e8afc76591d37bf7245470b406", 0x6b}, {&(0x7f0000003e00)="3fa5436baf9cd720c8fc9b7117eeff5fb9a01eecc4f29f4265910f82ab711908f7e67568fe1825e5f5e4877c71a2d6e601dff290dcceb3598520bf7de6fe6473918d719f56b9da0a1907d24a53f393110af42af5b4fc6a319d5122ea27887d0c226b0a268a90fb5d0cf9ec7538783ed916635294cd21c932902404f2008e6682fe10f7c02a57ed56e29421b8c0081e3e7757e75b47364c6009c65ba63c178f62da33acb2ca1520ea818127944748271f73cb31b204d7feee06766ae352bdf51f4af0fe8c677438e4b88076f4bca5a2", 0xcf}, {&(0x7f0000003f00)="3b4c9312b1f5ec5e21e864f07e713b368fe9e032fa8d6b2903ecf2f7370227161625ed275680ecc95da061c17c8d641a4d6c3e50ee19a6ef62344895e0df88c50eff15b297fee979d2ecbe1de425f467d4727e2a1cda1fb48a4148da93280438020a62c6fbc48ce3025ee0fff0", 0x6d}], 0x3, &(0x7f0000003fc0)=[@iv={0x108, 0x117, 0x2, 0xed, "9653c7d7ffe5de6826211fde85ba6684652e73de773e1919cf9bbfbd56c8a901589907b2d794bd1049ea1e42e20c8a0894df85955a429bd89ef8aa5e2a4ac635cb39d7ebe191d210bf46cc59ef61b59383758fb129ea5657e62075cb71d359352d868a49a228d1806f2484fa8e44b8b03adc30931171b9f0450cc1ced2fc04b6ddcf85d1f5d72ebc4bab86a053aa45ef6165026532f45dbe64b39daaef6f63492acb5d8709b909d760285eddd6a5b77e364f3f718a9b36f9e31a00c1d1926f19b8845e21abd4a0f42ec29b147be88b44c6ab537708404381448be1eb6476ae3e602c1cf1896faf9bddde330fb6"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x138, 0x1}, {0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000004100)="e64fefe57a6a518628d930cfc2ac9d688d781b47b3ec32d4f661c422f069025b85f76f7ae85608182e545fdc428d9ba09aff98c15a3f2f2951e104b74b0ba22e7ad46a1cd6b43eaf84fa8950ba2795e925bff8aa5f78d07432d859ca8eb76e6e8d8e9784733d49ebf82b6af56788559f5e23dc6b8d4f59fe7b46f005b4cf48ab97e82a7f86a9322f1e22252167c9257f0f60a9d5e8d7bd", 0x97}], 0x1, &(0x7f0000004200)=[@assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x48, 0x40000}], 0x6, 0x4) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:33:59 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x77, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x0, 0x1f, 0x8, 0x10001]}, &(0x7f0000000280)=0x100) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffffb50f0000080081ec93a230302e4c"], 0x15) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:33:59 executing program 3: r0 = socket$unix(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f000094cff4)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) bind$isdn_base(r1, &(0x7f0000000040)={0x22, 0x2, 0x100000001, 0x8000, 0x5}, 0x6) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) recvfrom$ax25(r1, &(0x7f0000000080)=""/183, 0xb7, 0x0, &(0x7f0000000140)={{0x3, @null, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 03:33:59 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x1c, r2, 0x0, 0x70bd28, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r6 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) bind$packet(r6, &(0x7f0000000240)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev}, 0x14) write(r4, &(0x7f0000000440)="7ae6f0e8793f7e050000018888ca", 0xe) pread64(r1, &(0x7f0000000240)=""/243, 0xf3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000100)={0x0, @src_change}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x3f, 0x200000) 03:33:59 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x77, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x0, 0x1f, 0x8, 0x10001]}, &(0x7f0000000280)=0x100) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffffb50f0000080081ec93a230302e4c"], 0x15) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:33:59 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:33:59 executing program 4: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x77, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x0, 0x1f, 0x8, 0x10001]}, &(0x7f0000000280)=0x100) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffffb50f0000080081ec93a230302e4c"], 0x15) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:33:59 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x2b912eb3b781f19, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x354, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000000)={'eql\x00\x00\x00\x00\x005\x00', @ifru_flags}) r1 = gettid() sched_setscheduler(r1, 0x3, &(0x7f0000000080)=0x2) 03:33:59 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x77, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x0, 0x3ff, 0x1f, 0x8, 0x10001]}, &(0x7f0000000280)=0x100) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffffb50f0000080081ec93a230302e4c"], 0x15) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:33:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:33:59 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007ff, 0x0, 0x0) r1 = dup(r0) shmctl$SHM_UNLOCK(0x0, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'e \x00\b\x00', 0x2}, 0x18) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x200, 0x0, 0x0, 0x5, 0x0, 0x4, 0x81, 0x8, 0x0, 0x0, 0x7fff, 0x7, 0x4, 0x100000001, 0x4, 0x7fff, 0x3, 0x1, 0x4, 0x1, 0x0, 0xc5, 0x5, 0x0, 0xffffffff, 0x3, 0x6, 0x6, 0xffffffffffffff41, 0x1, 0x8000, 0x3f, 0xf26, 0x0, 0x0, 0x71ea, 0x0, @perf_bp={0x0, 0x1}, 0x2000, 0x7, 0x5, 0x1, 0x7fff, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xa) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, 0x0, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000440), 0x0) add_key$user(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) read(0xffffffffffffffff, 0x0, 0x0) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(r1, 0x0, 0x4001) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0) 03:33:59 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x77, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x0, 0x3ff, 0x1f, 0x8, 0x10001]}, &(0x7f0000000280)=0x100) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffffb50f0000080081ec93a230302e4c"], 0x15) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:33:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x100, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x8, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044000}, 0x40) listen(r0, 0x20000000) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000040)=0x200, 0x8) r4 = socket$inet6(0xa, 0x6, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) getsockopt$IP_VS_SO_GET_INFO(r5, 0x0, 0x481, 0x0, 0x0) 03:33:59 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x77, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x0, 0x3ff, 0x1f, 0x8, 0x10001]}, &(0x7f0000000280)=0x100) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffffb50f0000080081ec93a230302e4c"], 0x15) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:33:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:00 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007ff, 0x0, 0x0) r1 = dup(r0) shmctl$SHM_UNLOCK(0x0, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'e \x00\b\x00', 0x2}, 0x18) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x200, 0x0, 0x0, 0x5, 0x0, 0x4, 0x81, 0x8, 0x0, 0x0, 0x7fff, 0x7, 0x4, 0x100000001, 0x4, 0x7fff, 0x3, 0x1, 0x4, 0x1, 0x0, 0xc5, 0x5, 0x0, 0xffffffff, 0x3, 0x6, 0x6, 0xffffffffffffff41, 0x1, 0x8000, 0x3f, 0xf26, 0x0, 0x0, 0x71ea, 0x0, @perf_bp={0x0, 0x1}, 0x2000, 0x7, 0x5, 0x1, 0x7fff, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xa) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, 0x0, 0x0) keyctl$update(0x2, 0x0, &(0x7f0000000440), 0x0) add_key$user(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) read(0xffffffffffffffff, 0x0, 0x0) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(r1, 0x0, 0x4001) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0) 03:34:00 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x77, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x0, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, &(0x7f0000000280)=0x100) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffffb50f0000080081ec93a230302e4c"], 0x15) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000080)=""/190, 0xbe) 03:34:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:00 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x24b, 0x181000) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x100, 0x6, 0x101}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x44831, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000280)={0x7, 0x0, 0x0, 0x1}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44831, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000200)={0x1, 0x1, 0x100000001, 0x3f, &(0x7f00000001c0)=[{}]}) ioctl$sock_proto_private(r0, 0x89e5, &(0x7f00000000c0)="89584ce05b87229fbebb7cd734665d02186ec45dc5b46e0735939f317344a69f6ac8c6ea4fbac8e7d741eb5570ae3ac116c574481b35442d3fedf4ad347c9fef14fd808233c15131131a2b2e70e20178fa4d99680febc3a49053fc80dd34855f6b5dadfb5be216000fd39a2e412f85ee88ef6414307d17f8351981f690ab99bef44780ec0dc2588517d55ace732762722a32dc8ae0da4b18e36f7b8441404f0231f6310c4d1d461adb6fd5f5982ea92b0c193c35a7b051535fa73ed3c4fdd0982507a9b31bba0ee682dfb8626d4046f2c5bfa2be5457") fsync(r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e20, 0x1, @loopback, 0xfffffffffffffffd}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e20, @rand_addr=0x4}], 0x5c) 03:34:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(0xffffffffffffffff, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:00 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000480)=0x0) io_submit(r1, 0x2, &(0x7f0000000440)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x0, 0xfffffffffffff801}]) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x800, 0xe00) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000080)=""/63) 03:34:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(0xffffffffffffffff, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:00 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x77, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x0, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, &(0x7f0000000280)=0x100) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffffb50f0000080081ec93a230302e4c"], 0x15) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:00 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000080)={r2, 0x4d4b}, 0x8) fcntl$F_GET_RW_HINT(r0, 0x11, &(0x7f0000000140)) 03:34:00 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000001080)='/dev/dri/card#\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080)=0x8, 0x4) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x6c22, 0x101000) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x3) pread64(r1, 0x0, 0x0, 0x0) gettid() openat$vcs(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/vcs\x00', 0x0, 0x0) 03:34:00 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x77, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x0, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, &(0x7f0000000280)=0x100) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffffb50f0000080081ec93a230302e4c"], 0x15) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x3, &(0x7f0000000100)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x2, 0x5) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="23000000660007041dfffd946f610500070000001f00000000000000f1ffffff0400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) accept4$packet(0xffffffffffffff9c, &(0x7f0000003b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000003b40)=0x14, 0x80000) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000003740)='/proc/self/net/pfkey\x00', 0x10000, 0x0) accept4$unix(r3, &(0x7f0000003a40), &(0x7f0000003ac0)=0x6e, 0x80800) sendmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x4c, 0x2, {0xa, 0x4e20, 0x9, @local, 0x7ff}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000280)="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", 0xfe}, {&(0x7f0000000380)="2575b023a371f380a080f1f1ec373e966ba2c3015201cbd4d95014c3b76f4a445b635d207b105551627d883015dc18a20becefedf177eb4d1a4b49e8ce238608e9b14a2c9512f24a058625505cda11ccf4841aacf3526d7268ece5b9faf5bc7ae22647bb9fb6fca1f491b722aa54cf73f74944aef62164929754f36200a990e49270279347ae70a05c091f3b079c03f9140114ae311db3bbb114e826889c6574c0fe711681b2269227466c3ad87779bb91560ee9cba0f27e45d99f5c88346e65175a2eaf45979d39c3b8dbcc0532638c9f4f7568e39c9f203e40cbf8e0235e26d108", 0xe2}, {&(0x7f0000000480)="36d5b7ba5325530e02b281b3b8baa9347e26acf89fb0bc260892a9afd9221d3f8f", 0x21}, {&(0x7f00000004c0)="a7790939096a097c93629aa57c7eb9f8d2836788702ba832e74e52be9689130497345e1a25e0e2692be574c1a5a1b3e36df15bcc0eb69f47500044e55e81ec1acedc828b679d535f1d319ecdb51b5cff53dd434c5b23e0869e9bc118ec1d26fcc3dd2df9aa4e12e3da5254c88c9820a9da4167335a1371ce1661eecc696c02076ddb97103c253367c119131b6b4bf1912453", 0x92}, {&(0x7f0000000580)="14a65b6c9a05390d04113aeb4cd9c4a5b8108593493c6edbfb613288fcdc6f6f485b81a5c548969948dd68eee0ea01b926479e91edfa5692596936b62e15953252b8f78ee22155932525c441e3031d1e715365ac5ed432d63c2395160656eb9baf49e472f66c8a3dfdff61a63721d7824f8d95ff87503d5637111186dc1f901ec9f4e39d92ac23ab6cadb659c1456c3d524b9f67a69bef2a5f6b590a6cf776cee547458d57efddf8248b451f3960efa0e33bec394849d5e9522d16d4dc0b5d424ac3c80f41d410c135bbddf044c97a8bf18e824aa0edc3e3c0f7771186959c44eea97541face651ddefa9d320a57434cfd1f5dbe045365b8b7864d5155a9", 0xfe}, {&(0x7f0000000680)="0fe5b1edae260eb65078b775b0c863ca082a76188e58a6806cfe20a547cf801f9b37cd4fe8f36b7cf0f3eaaaa7303ee340a5c553bc69fb2be0315c51e093929db8b7c62534", 0x45}], 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="78000000000000001801000000000000b90c3c143f094ed739ad686c9f83933151d7c3e08758696369015100de4c37df71790abcaa1981ad5ddfcd645740a0f35cc10d7dbb43d80002bf5645e866e8c3aecce7da8ffbc9ec53e252f4aa694359067549c2ccabee8151a269ca632454dd21c7d1c5e11abf7e5e7af928509800ff378b6e04a5002000000000000000000000001f0000005687"], 0x98}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000840)="2d8d6057cd3aa5332475d19c5e834df7c58eab70a1bb7d2658d55bb5bc7306d0c1688f8dd766faeb456f5d02eab2e7a5d2542ad3e11058eaa42c1650bb63416bb5a356fac20beb4451a7c538317a76cd7d30dc4d9ff11d9302758a2217758b8b25ca3551de0244afb15707b42026d6fd334e0cf3611db9c50579", 0x7a}, {&(0x7f00000008c0)="a0f5b8c4dac6434434c53f88d454127622431a89c286872c11589318c59a1432bb83ba9ceb66ddc04f16c0d9e6653cf35a565a2431b9ea04797c8c87f8d5be055f", 0x41}], 0x2, &(0x7f0000000980)=[{0x108, 0x11, 0x4, "267b5b096fe890ecd1856fc0da1ec9d0b2b1549e0de87630c5d54916a971350bf66cc1c86b0306c26217b3e3b80fdf939b5f93de10a2fd6bb2b06e34debb2f63e9d7cd92bd3c31874fa6c40b8df1d38c1c6d8c88e3b950cffaa2e670a0c56be62c4a93b4989215e1a2f07d774a35d87eb8a6d7d30414bba6313631235a1bb2b46eeb607c99fd48a6e820744dfd79c69b48b3fb153b6e448fb771eae3e0c708436f58873453862957d48c942b00640c705c5a19d9dd5d4b84a4b5aef863c8abb7667f004f5645317c50760ca8ffce69feede26b1da2b019a968ce56ad30f3cbe61483079d3773ae86960e0efe3256659f3a22a6ee85368b"}, {0x20, 0x108, 0x800, "67cc92f7b71ba42eb481"}, {0x68, 0x11f, 0xb0, "3d25f2540b6fa0939239ad0871527882a5a2ae6eea122868b7793f84afdb06c5226df8cc1ef7a24268476d6e0b6ce9be940263de48ff886a5e21905e692ab3d8f20f8f6eb145b0ade33e5269fe78cf2e759c0ec039"}, {0xd0, 0x11f, 0x3, "0259ffc1dd49e7d4407f68bfe9e94c84484bf86f2072dd5e553ceef7c68ba9feb65a1a8122ef9838a637490c01fcefff582c6709389d64f92bcc8e0415eeb8e5acf28f1746d36972460c007eafb1765886c606e207f5c10721e342ba0ce987761382f8ec50762f361e5de1ea20e0f5f707bf7440336955082bf892295d3de3d8751053aee4ae6c535b487cecb9859874e5b8385c1cad16275faa5c8456d17d5ee86379c0c8e1bbc0ab5dfd7fe109a8c5824e7e866dd10ab5c54ebc68"}], 0x260}}, {{&(0x7f0000000c00)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @empty}, 0x1, 0x2, 0x1, 0x2}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000c80)="fc3848b3e9ad3882f86201824c3ae02f3ea4778b4580f545bbd7df81249a6077202370e6110ea071e547681e8f0bbc559cfcf27d2ab49f845cb52ce7fa2a284dda4fc3c1e70b55af0b05c52f1a025dd1f792e5c8cc2c", 0x56}], 0x1, &(0x7f0000000d40)=[{0x38, 0x100, 0x3f, "3dc4efc48b104a1911153a56e3ac8aa9212295bc63ad679e7c3f02b3d2a7eb618071b3"}, {0x78, 0x11e, 0x1, "e1eaa03b4977d8ad905f4b1952b5126f6da011b7ba540ac76d3426d9383e294e22de1b0007d3149628ae01a2b6d322f46b9062482ac7cf9e2cc800ae998b71761c2f7f715253e58dbc638530162bf4c76541260fd3e60b9a0b4a9706252a642f705fb21ecaa135"}, {0x10, 0x11f, 0x367f}, {0x18, 0x119, 0x8, "f41dd9168b9bae"}, {0x110, 0x109, 0x6, "2f921ead72511f06d376673c429169b2300643b34d8ed58c9b78a61330fe555c72b427efbbd7bc466355db26cd5e53309951055cef441799197b2dff6c2ff38806f2e13c8266243a19df25b3930161e51a0dd799cc8fb3d9fbff86da2cf882194295731bb8ea569543cbabb2880205e3a3614b23651a7c409a4d1eaeef9349f4d9d8ad71047a1f6361070b9abe62fcb7578b24c750d46eb3d68bae97af1529c023f5c9da36796a680e8b3d493576637cb2bf5afdedfb0eb2208e8e8279359070b3dba75b10854f8ce36ef90469d7b8ef0bbd403966e38736518cbe9e49e7a9bccecce0c994812598b051e7ae4bf71ae7b29633f020bfbcaba2"}, {0xf0, 0x12d, 0x100, "58172f1a45aff3d8ff9441000a83098421b8afb40b5905de7bee0547d4a4fb151687c059de93b9d9a666dcb2da2bb623673435b951136e804701691b49685e7290517a48b9d177f875747e4badb91c038bbf9b91ff49237a1370868cf21f01ea1ebf96509b82cda92237b8c6f12947a0e481bd91a5fb754ae91138526d50e895357e9e6b44b194b860766af7a25bfee5df407e5798b3fde2a0c0a71b1734126ae583ee2d6e5b2159364c56df597641d4f6aa6bc25ee53497f7d42f9d7d3d3022945ee1d026f56363d6ccb92ab355ec70d168df988069710ae9"}], 0x2d8}}, {{&(0x7f0000001040)=@in6={0xa, 0x4e20, 0xca, @ipv4={[], [], @multicast2}, 0xff}, 0x80, &(0x7f00000033c0)=[{&(0x7f00000010c0)="63117965d21ce8bf6a442d53b80f5d084e14c7abb44b3f5f882d5b0e0d1535ff0f67270ba48e531c28ded9183bc9659099b9a77dab6c0f6e95f10fbb7233e1c35ade0b273beae1e43fcf63658b72aa873c1e4231d4030dfd4e", 0x59}, {&(0x7f0000001140)="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", 0x1000}, {&(0x7f0000002140)="83620ee2bfd285ab326cf0e1e07002f45e84e644a9d75faf05b7dd3d719b3942a2627ab6eff3ac307b332597ba4e85f0617aca3add0e31e3aea152fcd785413071e7cd47db65af8eda0d7b8e62fb19f844ffed5fdbd8223e416144bbe224089568eb98326a790e2ccc90e274eca7fce29e0e92c99b8ae9e31f99ed772a9d34a5ec16411aabada5e3b20d771bc4586e2adbc171ba507b0a35ba53144bce174c553bf09853c0792b507d99e7acb47540", 0xaf}, {&(0x7f0000002200)="23d045842e2f62115988a4c46d310906c84855b74d7e6b11d9891e92284637bfdde397014839003613046df622c35932ce1927a0e185657b1303d6ab5125f5152834947e77b83c528bcd73152e8bc70debd076bbeb2ec23107dd223636080d7f47534b5224fd2bd6005a07aea9e3ca1b17df10eb3e0fde4f685b21d6b930a3273d6bf95aac8e2ac5be79146b82139c407057c2a754bfd241cfb3bd030fd5f0f27e06c3514fc055b9d6efec12924c", 0xae}, {&(0x7f00000022c0)="4212a4a81b94d21be99fa095e500c6ceba02ffe9e5c02d552602ea721bc07470f439d4", 0x23}, {&(0x7f0000002300)="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", 0x1000}, {&(0x7f0000003300)="196948139f3ae5cb9d91fd91cbf6dc5a04604f5b40a77ab565b0dcc7246b26f46a27ce6788e7def4dd60916e0c9d07ff9ac04ea805534d142af050889e658f166aedeb30a9e75bf709e6e9c45dc4b04fbda2fa3e8f9f1e2ca032be72881e29a410674c1b676781e5c30574857583cf45ad6656fd708053780003b9ebe68d85658d99948a1a765f75b01bfac71e656acd", 0x90}], 0x7, &(0x7f0000003440)=[{0x28, 0x115, 0x3f, "b673821b9882508b556845210ad7a704f4375fa80b5a"}, {0x100, 0x107, 0x5, "c1f69e6cb82581e7b631bdc1436e0140d4ce5ba0f92bc9ed0e66bbdc0676fd938ed959bdef2ed593fb95dfb4d96a3959e65db98b99266c5ccab03d25432b0692cde186f95bf045468a999ea611f3a23f4c074fd99b50dd01f4d674de193804221c727416a54c812de52b678329b791c40c3281eea1585cf7c531a0dd908dce5112381c1efdda38aa867f1b9a58e59b39bd50bacc53bc4d61abf82b496fbc07b99e54f08e89be0bbeb487a6fed99f07b4af8be36cb7a3446885ccac0861fe6953b7b17fac6a54ba4fe7d277a9d5c3740f8900b39092847b7a2ebb10034e97cd093372cb0c56e16c474b2b6f"}], 0x128}}, {{&(0x7f0000003580)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @rand_addr=0x678}, 0x3, 0x2, 0x3, 0x3}}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003600)="eaf1", 0x2}, {&(0x7f0000003640)="afeac6a77f235d3258b33e26aaf9157a98a433543a476048c23215692eb1366a3b7d38ec564d653ba9bba42443fabe3fd1c6f89b6457dfce7b9f30a66dfb7b5324407685e81a64aecafe5b346139715d34f74c82072ab6d5be520eef48486fbcd24e6f5601ce6d07ae144ae188a1a7cefca829b8d5fc6f5b58d8cde9fe0482d0f0f4b11e5adf5f3dc32126cac16708fa9498093f24bc9a7bab1225ce0a2e821614cb4aab80a5faf3d94910609929a15fb7d3f97e7faba07071dd39eb2e62fabaaa9aec898d61", 0xc6}, {&(0x7f0000003740)}, {&(0x7f0000003780)="54700371026b2a82819e05beb48d36cd54b793db5352c3b8a2bccd63ff7c65a38ea957e11089c12966f0071820c97cd1d1bb0ce9b71146589f25cf427ec317cf1300fbde54e575cdc4406ffb704d5555dc1d7b30131bf5bfaaa28c81529ada195d6510de75960a67bafad5645a6171930f04f05cac89eb79821a899c90bf0d31e741cad7f31d6c3f72f681208ad07458c7ef12cb1b2426221603bf9689", 0x9d}, {&(0x7f0000003840)="492ea528476b74dcb3cb7fab2cf13f517455832ec857986eff5f950d0169cc6f284b0bd1aa8c448e1f4eb5d31cdd5a2aedddda7d113ae48a6d0ae802ffd5cab79217610404b523", 0x47}, {&(0x7f00000038c0)="d69ad169d7deb1ab62bd7db4ae3229052abc0bc9c2d424ebb2b486fd573aeb395a8f3c8891bb56f2c4f4008c2a36403625acbc8e2d3d82034377470af508212789796c607bce", 0x46}, {&(0x7f0000003940)="d78e7add7c794ec27ec2f58df1e15bbbbf7a4a96c1d3cde0e046cc5ae5d84773c7eaabc7e2140f6cdf099990a49c9b096672e6faab18882c8518b07b1d1b4205194d26fcf7b5e635115bc6a4930a6fa28b428f78f54efd7ae74992", 0x5b}], 0x7}}, {{&(0x7f0000003b80)=@ll={0x11, 0x2, r2, 0x1, 0x9, 0x6, @remote}, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000003c00)="824b329554f4c0f2fdc6de2e11ac3110396ba49f2f", 0x15}, {&(0x7f0000003c40)="2da984fd80d17811bb635e3b0f755ebdec", 0x11}, {&(0x7f0000003c80)="a6550dc512ff01d33352740c2475104d84ae1b4b5f80597a5f66a76d832e98618395d8b2c1d8a7bba3a9371bb11a4a761eb0635252235fed588c0acc4ff2dbb1d1bee25c386c051a574292b676ad1b1b62c37cc014f898a512aa88f95d2819be335bfbe1bb53db15665a67d4242337c1f9b4fa69af55dcb87633152d49801ace206d3f67e55c2f765db9369f9c68e5ec2b017d5309c6722416a30e5062e7bdff55dad898764f17595a9d89e7171a1e40f9ab6162bdff56815c603786892cd3cc9926291ed33dce0d7dc6650e2302f6f89d1da4b85e500a5e0e78b0e712c6ff", 0xdf}, {&(0x7f0000003d80)="d86425873c8f41dedf3a75184f7bbfd0ba63f87a357c924c7e6083232aa5885146d0d9ab762a56339b80d3ef75ba693e12550e41a52a1b9fc750bff0f4bb7975ee6cbfb5048742b6ff156ce3c4a562ed6147db0de479662feec63b00d01d92fb0a8d3f30fddcfe9371943959dadeb1a68899ee4fcd091f0c653959bc83b6eccc9a5b72c05b5623c659", 0x89}, {&(0x7f0000003e40)="52d6cafd1ecf06a706909c63b1a1bf5d7dc6fe8246b6c0a219d1b9035d4b6e7fa6c68bae9a7ce9e99fa7be68ae3ec0c4f15e588c7d4c4a4f214ab290808bc9b0aa3bc14b68c979d10bd6d3a4334abbe5fbfe87c506463b04731e6c0727199a9998b2", 0x62}], 0x5}}, {{&(0x7f0000003f40)=@ipx={0x4, 0x7fff, 0x4, "4e98c1d3a156", 0xff}, 0x80, &(0x7f0000004100)=[{&(0x7f0000003fc0)="2e6b6e9429c7d2d057d589739337c55279b9be9b82af3e4c116ac4544c047851486623b615219a", 0x27}, {&(0x7f0000004000)="ea4a3af884083ffd4e8eda86d09af7927ad8f61d234a8b70b7f24a597b02a9fcdb4b11d55194fe9bb37fac138b86411b70c0fe50ef0b0dc6f19e6b0d515c505d4a5d398133bf6b9b98f023005c94198aaf690a07640717fadccb3ababcca34dce9bac3d66ba2b0dfa8ad63aa3ad37e63bb09d49b7761d498da208f725dc3cfac3e4a3177856d0bd3e9ee03f6e9501e25ebdcdf5422d54c9145e2f433f53a8addb3e36edd97bd2c231d55e671313b78586ef2a6f5b3812fb69b17bcea518235709ab567b81f149a9d2aeae5a4eeb6035d790b985b7d8ea2a28746c56cc6bb85d68f5bf950ebb0c0a4bb86ee83655bb86ef0a7b48ce326b436b9141d", 0xfb}], 0x2, &(0x7f0000004140)=[{0xb8, 0x101, 0x401, "f2c492e8ffb3d0fee043d81528c19e4d58ede8ff80820a587a5557a7fbaeb0f8f3818c385b3d1f152bc6d1a50cf7f615e8fb3e6009e7c53e9b6586a236dce77168c8c240ecdc234dbf18a2c045147adc3d1b3e9f23e5d87aa325837d5274d7afe0537d71bbe0a0c0ad5f26c3cdea8bec8c26c9d9289aba638b27679781ef14c9d8fd8d05ce5809051928e21e0e06fa22b6f823034f8a77e26e92cc20bc30be52a13918"}, {0xf0, 0x105, 0x8, "b58c32cb24e683d4e2dc37b6ebb8a577f938f058b5e876eeaecea4ef417bf267ba918486c991a40c9df4c4216a6af0e7fadbecf2a89077fd47464e863996ba9b537a3a76c65dc22898a57453eca63b51ea6def3b2c3389e637906d342e4af519e36f2b8bea2744f6a810d97c2d5c5427aeea953fa37c9a1d73282003538b2d7fd5671d4522bb545d8f31c692a8638b231fc5b59198983a8a7274ab198ba0ded8eb9dff9e878a6367ede8c66e88b79dab00436309b6c4ebd997b660b171c148ce09c32ccafa39cf801bb8bcecd183b1bbc2689d0b99a0b14f1b430b"}, {0xc8, 0x11, 0x6, "35e54ee9562ca2663f9b5ca289a99eea45b755b71cd939e1ec75f7d437b60d8a8d5cf5e22e2bde6604dd25db8b9535e02ece2057534598418a872f064b921210e7274639bd5b0dee20b8015f728d7a7389c07bf42bc2dfa001be8cc5338c21cfe7dc85b18725fa32f5162e78c87797905d378efda0f11466fae159bd81a00807f717840c1ca72a239be76909b4809a15708e16fbfa0689e51488dae3c95171db050f4355a34ab77bfca477de407a22a334a620"}, {0xe0, 0x129, 0x5, "af77a8b05d0d0a423972cb80480740f1621972621bbee6a6b261cdc56c9f90bbf79fc36c5ca10eda06c968447db9bc204c87712abd3acde7b2a229beb2b87d8607d700bb36e082a6dfe87f4d4e8cb9497cf7263bc57a7a627ee15ba2b70485dc058457789cf554dd0770f34a480f66edde0bceb1c2cfeb8bc62ba0f2c61782c206f7a848f10da92468f21fb1f5605ceb0d742d1591c661261703d70f666cb0316cadc4ca7ea3a44d33cdde49f6f2dfc308ffd6d4a6336601ec2ef2e405fb42bb76e00b70dad8a7ff1f9f"}, {0x80, 0x12b, 0x58d, "9e8e4e249b380663a7159bb3efbe27f450056fd5bfb5431a6c7c0d8b9cf2d1f012b740cb587af1e800f6ceb9558a510d138286301fc891abfd395ddf40cb41388d2e8baff073922b19a7101a73f53a130306887cb001df343891bc37947ca5626634493eab9bffdedca0e4"}, {0x78, 0x114, 0x100000000, "4a151f4162722fe2f90e47bec06aeb4e2a41d3df5f13248ce8031a1b8d5be51a0d3ca0f15def2ffca6c59e4f3efc0d75d96027ad8be9697ebbbd0f78e6625b64231b62b847c38cfc870b007f64c4f9d71491d05c5d8341332da0c173a560b80457f6e9c164e1a4b8"}, {0x110, 0x1, 0xffffffffffffffb5, "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"}, {0x88, 0x0, 0xffffffff, "ea2566f15b78eeafa4d4eb1060967f04d095fcfce16932df286c60978223a6009b0441f38f53124c3889f00ec6bafbaf542d6147183ee9ed88691b1c92f69226c19641a48e2bcdc6d4c7179711f5f925340386ab812e2bffce48526910eb46c03578c8e6c0f7c8b5203b1dd78d6c6e1bd37837ee"}, {0xc0, 0x119, 0x400, "08113c496051068252523c0a5946aa6b04aab73f2a53b6a485508b049730c1106630ad3132eba8328cc172b1610cc22e7c035759346b60b56f0d1e36a1ed6391fad9aa0e95989bf23635a03ee1d8453f57b6a871c5cc9a33cbf1acb0ac2681ba0266ee0a6c56d4a3609d1dea26b4eab9017cf4f470e80abcb0e5bfafc80f79fb77727a814ed72f69fd7dbe34db40b3825ffec6180803d7192390a81fd97de25f35b8175e99b0f56c25"}], 0x6a0}}, {{&(0x7f0000004800)=@l2={0x1f, 0x2, {0x2, 0xd9a4, 0x100000000, 0x8, 0x9, 0x1f}, 0x80, 0x8}, 0x80, &(0x7f0000004d40)=[{&(0x7f0000004880)="9e6fdef73618658ab6406284f05f90eaa63efaa7cbf79e8b4408ebd5fb2d5a2fcce924c71354221b5a612971a5081faf148a8d3c323b8fe5b7197719444b894fed5b0ef8d7ce1ec2610e769c7972d738913836b970b378652f9d7b9e92a8994bf2b906071189d77781b24a5cba148b3f31b3d7beef8a7c", 0x77}, {&(0x7f0000004900)="2ed7a61cf461ff0d96ea2d6e15c799b1bd0556419ec420bc355f7cd25d1654dd85cf9dfd64bd5be541094f3ab263dcc6e3802497a90973724d7655e5ac91c0", 0x3f}, {&(0x7f0000004940)="4d3b6ffc6a4cf424aeb1e04bfa4f89fe08571016fd3820e20bc10d2f997bc95b5f18d03bbcad93a95cba84", 0x2b}, {&(0x7f0000004980)="016313ed51bcc1a73ae1d27114a3a18ad67aae973182ce8cb66f26b23cb2a6b16ac319f428d00c9b6bc06068f88ef616d7e5a7975f2cefe8318afbdd43d6153416b18ff7ddaf5c2e303d", 0x4a}, {&(0x7f0000004a00)="ab85767ebc68372fe045562e1b68ff0264adceb0880f3d70bd5273078f2603ceec0bb4778787c0320cb05a1ef6b0396898a14d74080b01c46cc429a7371f666d6a", 0x41}, {&(0x7f0000004a80)="76b1c6c6344742ef211e4090fe4a707c3931edc65f65a9c4d6148025b94de93cc19c8603ae2b50696692677b90a316503731a9bf93395f3c9a3ebb9a68d3e9e51a2111fa3b044d1c5c0cee819fc7f647120c2680ae5320f466e97b4c1417ebfb3aab2ed8ca1963272a4f6196b08f3698b3811302893c39a2881945c540857909b12b23664c333321bc2fa9a17da01e490a55ee4bb3e1cd53cf782a8955d63759899c96d6", 0xa4}, {&(0x7f0000004b40)="b2ca5a115e64b4ea826fe830035a9f08bbf675ad74d142ccc5e6ecef534508e0866117a8c6d3ec73235e7900e056a65904f2a875d2c9bd0f5126ab0fb40f2d316b3da78c8e852d6d3868e618abd94aab02eaee4fc4aca08c22703665309155e8f1ba8b4182c7cb6a3b497fd076dbbfd47f225dae264817c289c084ba3cb4bb74a29ca5324387c8c485b53473be94e7610ada1a0bccaa2d1eb4e3e0caf5b24c40664d2416321b1a1e469f2ead502befdb0b0ce688e69fdef5ceee2f018880bce90a21d4fe", 0xc4}, {&(0x7f0000004c40)="d4f1517c49f3f9864ec3a3fdac78ea8e150635b1e6d15d6e7e42f2c2cca9a20768fa2e48d52cdabe80aa77a1dc3b622575499745c4eab600d6f10281597683a5603562e1acadd4c126a7bd8b6740f7df7d46e187b86bc00733b218b0fa81071c442fd9d33dab15ed43c258d22b4c675dc2eed1f6ab82aee35cc82ba4e428797a27d26a1bd3e0c1aa98f2cca6a01a849b0552e00046459bc17c35fdc83226dae1b73eb16713148cbf8625f7b7cded083e4926a380afb1bc31edf0e7225f12d416c84a99fdf5", 0xc5}], 0x8, &(0x7f0000004dc0)=[{0x20, 0x10b, 0x9, "7666806fef0658ba1382a36d"}], 0x20}}], 0x8, 0xc000) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x800, 0x0) getsockname$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c) 03:34:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(0xffffffffffffffff, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:01 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=0x0) sched_setparam(r0, &(0x7f0000000040)=0x8) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000100)={0x4, 0xe5c, 0x7f, [], &(0x7f00000000c0)={0xbb097f, 0x1, [], @ptr}}) r2 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x6, 0x800) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r3, 0x600, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40041) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f00000002c0)=0xda) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000300)=0x3) getsockname(r2, &(0x7f0000000340)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000003c0)=0x80) bind$packet(r2, &(0x7f0000000400)={0x11, 0xf7, r4, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000004c0)={0x9c0004, 0x1ff, 0xc3, [], &(0x7f0000000480)={0x9a0910, 0x7, [], @string=&(0x7f0000000440)=0x2f6}}) write$binfmt_misc(r1, &(0x7f0000000500)={'syz1', "a1fc1bc37c6221ab9a5189286c59ffa3d2c04b044b6ee8e5b92ec1a1e1f35ef89fe328f48bb332fe714c6a876ce05ae4e54f80c982c2744e692ed03c1813ba31b8a19cc208890764e7d09fc67c6374b87d8907deba4210869855faab47b4df42248d1c2b0f78d3bfaf4be9875ebf277bb52c2a9494024f14b6a37339f78f9d55ab43baa1094966a2255f943fbf11d06320c88cea88b36b"}, 0x9b) r5 = getuid() sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r3, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4001) getpeername$ax25(r2, &(0x7f00000006c0)={{0x3, @netrom}, [@default, @rose, @rose, @rose, @netrom, @null, @rose]}, &(0x7f0000000740)=0x48) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000780)=0x4000a0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) getgroups(0xa, &(0x7f0000000800)=[0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xee00, 0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff]) lchown(&(0x7f00000007c0)='./file0\x00', r5, r6) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000880)={&(0x7f0000000840)=[0x2], 0x1, 0x4112, 0x4, 0x8, 0x7000000000, 0x1, {0x7ff, 0x5b, 0x0, 0xea78, 0x6, 0x4, 0x6, 0x9, 0x8, 0x8, 0x5, 0x4, 0x400, 0x8a6e, "d21e3760fc512144b51fb7f6a449426af0adf069a9946ea0cc721fd4a868c99d"}}) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x3ff) setxattr$security_evm(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)='security.evm\x00', &(0x7f0000000980)=@v1={0x2, "0e011bbf53"}, 0x6, 0x1) accept$netrom(r1, 0x0, &(0x7f00000009c0)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/loop-control\x00', 0x0, 0x0) r7 = open(&(0x7f0000000a40)='./file0\x00', 0x294840, 0x90) fcntl$setstatus(r2, 0x4, 0x40800) accept$alg(r1, 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r7, 0x29, 0x2d, &(0x7f0000000a80)={0x1f, {{0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, [], 0x1c}, 0xcd}}}, 0x88) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000bc0)={0x0, 0x1}, &(0x7f0000000c00)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000c40)={r8, 0xffffffffffffffff}, 0x8) 03:34:01 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x77, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0x0, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, &(0x7f0000000280)=0x100) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffffb50f0000080081ec93a230302e4c"], 0x15) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:01 executing program 4: r0 = socket$inet6(0xa, 0x2, 0xfffffffffffffffe) setsockopt$inet6_int(r0, 0x29, 0x1000000000000019, &(0x7f0000548000)=0x3ffe, 0x4) sendto$inet6(r0, 0x0, 0xffffffffffffffad, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @rand_addr="ffd6f1b9201348544de96b337da295b8"}, 0x1c) recvmmsg(r0, &(0x7f0000000500)=[{{&(0x7f00000000c0)=@xdp, 0x80, 0x0}}], 0x1, 0x2000, 0x0) 03:34:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20ncci\x00', 0x8400, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x21c, r2, 0x714, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x68, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'syz_tun\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa9}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_LINK={0x10c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x23a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffbff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5a9334fe}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r3 = dup2(r0, r0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000280)={r4, 0x1, 0x6, @local}, 0x10) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYPTR], 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0x2e, 0x2, 0x5, "6391ff5dd467c572a1a0538d853ddcb6", "089b9cc6d170c210c597b3e7bb87cc097422ffccd2f2e3761d"}, 0x2e, 0x3) 03:34:01 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:01 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x77, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0x0, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, &(0x7f0000000280)=0x100) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffffb50f0000080081ec93a230302e4c"], 0x15) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:01 executing program 4: socket$inet(0x10, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00\x00\x00h\x00'}) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e20, 0xa3e2, @remote, 0x1}, {0xa, 0x4e22, 0x4, @loopback, 0x5}, 0xcf3, [0xdf60, 0x7, 0xf8, 0x1, 0x5d47, 0x7f, 0x5, 0x3]}, 0x5c) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) [ 428.271372][T18944] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.279011][T18944] bridge0: port 2(bridge_slave_1) entered listening state [ 428.287564][T18944] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.295243][T18944] bridge0: port 1(bridge_slave_0) entered listening state [ 428.333150][T18944] device bridge0 entered promiscuous mode [ 428.395849][T18944] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.403221][T18944] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.456025][T18944] device bridge0 left promiscuous mode 03:34:01 executing program 5: gettid() fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000100)='%nodev$nodev\x00', 0xffffffffffffffff}, 0x30) r1 = getpgid(r0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000180)={0x7, {0x80000000, 0x557e, 0x7de5, 0xc5}}) fstat(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r4) prlimit64(r1, 0x0, 0x0, 0x0) 03:34:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:01 executing program 3: r0 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000001c008104e00f80ecdb4cb90402c804a012000000040090fb120001000e10da1b40d819a9060015000000", 0x2e}], 0x1}, 0x0) 03:34:01 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:01 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x77, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0x0, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, &(0x7f0000000280)=0x100) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffffb50f0000080081ec93a230302e4c"], 0x15) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:01 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}, 0x1000000}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0xe011, 0x1) 03:34:01 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x77, 0x1f, 0x3f, 0x6, 0x4, 0x0, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, &(0x7f0000000280)=0x100) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffffb50f0000080081ec93a230302e4c"], 0x15) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:01 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x10040, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="46d4da3fc3cd4bed0243219e956a3aa2d3063cf6809d817ea97efac7b97a59d6a079710cfbae3953dc8b347ea1c73362aa2e89dd58490fd49aa54448e5d9a3867b09a55ef47c51a3a40e90c96af2da4cf8b59a017bfd13a7669369551e0b5372c093fbc759b1713da870e84a8117cbb18268417f9da47cb7e89a8c47c2fc66a71ef1bebbcf0cb62e41f97cb27246294174c8e838d0c04abdd34470e13ec25ff6ea4b8125e3c0bf8548c3f2c4d88b8ef8a6218fe761ee7b1572cf978352bf01554ff65b151ffd49b040cfc952727cf3675133d11514da1e143a2b52dfffd59bac39db932d215c34644a233d690f50278a5c08") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0xf8, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote, {}, {}, {}, 0x2}}}, 0xf8}}, 0x0) 03:34:01 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f00000086c0)=[{{&(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10, &(0x7f00000000c0)=[{0x0}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x880) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x216) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000700)={0x0, 0x40000007fff, 0x80000001}, 0x14) shutdown(r1, 0x1) 03:34:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:02 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:02 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x1, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400020}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@getsadinfo={0x48, 0x23, 0x104, 0x70bd29, 0x25dfdbfe, 0x0, [@srcaddr={0x14, 0xd, @in6=@remote}, @lastused={0xc, 0xf, 0x5}, @extra_flags={0x8}, @mark={0xc, 0x15, {0x35075d}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x40081) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000001c0)=""/221) sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000000ffffe0000001fe80000000000000000000000000000000000000000000000000000000000000a8b205a5c19300ac552ef94cbb73a83125223fcb470ad82f44f9", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c011100"], 0x15c}}, 0x0) 03:34:02 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x77, 0x1f, 0x3f, 0x6, 0x4, 0x0, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, &(0x7f0000000280)=0x100) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffffb50f0000080081ec93a230302e4c"], 0x15) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:02 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x4, @vbi}}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x772, 0x1, 0xa, 0x1, "5223d9492cfa8181228ad05671e339c7d7591ab4425bf1718b6ba1eb02ba9a6ea2a2966d01a2d056f0c75f6ca9e8359731c82eb5e0a02953f61080a7cf8a2381", "114b79c2b3017fe87f0d360b5cedf085b8b48a93cdaa850530c8a7011390f5a4", [0x100000000, 0x7ff]}) 03:34:02 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:02 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) gettid() setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000140)=0x7, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f00000002c0)="17c4f79ffcb669ef51ebdcc2a96c2af3be9173f725d14f1a883efa6587f1", 0x1e, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000240)=0x1000000004) r3 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r2, r2, r3}, &(0x7f0000000300)=""/83, 0x2a, 0x0) [ 429.137070][T19008] netlink: 268 bytes leftover after parsing attributes in process `syz-executor.4'. 03:34:02 executing program 3: clock_adjtime(0x7, &(0x7f0000000100)={0x20, 0x1f, 0x3, 0xba, 0x7fffffff, 0xe31, 0x1, 0x4, 0x79f0, 0x5, 0x57eff1a2, 0x4d, 0x1ff, 0x6, 0x8, 0x5, 0x1f, 0x9, 0x2, 0x5, 0x7ff, 0x9, 0x80000000000000, 0x80, 0x6f8, 0x7}) r0 = socket$inet6(0xa, 0x3, 0xb) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = socket(0x8, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x2e, &(0x7f0000000000), 0x20a154cc) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x2, 0x8880) ioctl$RTC_AIE_ON(r2, 0x7001) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000040)='ifb0\x00') 03:34:02 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x77, 0x1f, 0x3f, 0x6, 0x4, 0x0, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, &(0x7f0000000280)=0x100) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffffb50f0000080081ec93a230302e4c"], 0x15) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:02 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:02 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x401, 0x200) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x6, "18416f7b543e"}, &(0x7f00000000c0)=0xe) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100)={r1, 0x49, "5ff286a1ce3dd6ce62d03e1308aaf85f3a6d39ad99cbb1de5ee636921baec71d0c2d1befb31efce34cb6fffcf37cc3a818569523a52c431fadd67f72684dd046602f9eba68ebe5fe9c"}, &(0x7f0000000180)=0x51) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000840)=""/50) write$binfmt_elf64(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0xfffffec2) 03:34:02 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x77, 0x1f, 0x3f, 0x6, 0x0, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, &(0x7f0000000280)=0x100) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffffb50f0000080081ec93a230302e4c"], 0x15) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0xce22, 0x0, @remote}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x200) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x48000000407) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000100)) writev(r3, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00"/88, 0x58}], 0x1) 03:34:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="c0dca5055e0bcfec7be070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="020a040007000000eb008900003f220005001a0000000005d9dc9d8262d01915ecf2cf0608bb98bdb1008d1f227f45684d3b25be23ff0000"], 0x38}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x40001d1, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) 03:34:02 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sctp\x00') ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f00000000c0)={0x5, "08602ebb6ee64cf7ef53bbfab222a33f9ae261a5c03c8c0cdc00f0de05e03b3d", 0x2, 0x1}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000001c0)={{0x4, 0x7, 0x7, 0xeed}, 0x0, [0x18c, 0x400, 0x1, 0x7, 0x9, 0xffffffffffffffb6, 0x7, 0x8000, 0x7fff, 0x8c03, 0xf8, 0xbd13, 0x0, 0xd9cb, 0x3, 0x3, 0xffff, 0x6, 0x9, 0x800, 0x6acf, 0x6, 0x2, 0x9, 0xa65, 0x6, 0x3, 0x3f, 0x9, 0x81, 0x7, 0xfc28, 0x0, 0x8, 0xff, 0xbf, 0x80000001, 0x7fffffff, 0x9, 0x8000, 0x2, 0x3, 0x4, 0x3, 0x0, 0x3, 0x1, 0x10, 0x101, 0x4, 0x1, 0x9, 0x7ff, 0x7, 0x8000, 0x5bba, 0x6, 0x0, 0x400, 0x80000000, 0xfffffffffffff3bf, 0x6, 0xfffffffffffffffa, 0x8, 0x4a, 0x3, 0x7, 0x3ff, 0xb2a, 0x1, 0x6, 0x100, 0x6, 0x9, 0xfffffffffffffffb, 0xffffffff7fffffff, 0x3, 0x2, 0x1ff, 0x5, 0x3, 0x8000, 0x100000000, 0xffffffff, 0x1c, 0x5, 0x2, 0x100, 0x414, 0x401, 0x6, 0x3f, 0x3f, 0x0, 0x10001, 0x400, 0x5157, 0x4a72, 0x8, 0x119, 0x5596, 0x1, 0x6, 0x4, 0x9, 0x0, 0x3f, 0x7f0e, 0x100, 0x8001, 0x6, 0x0, 0x9, 0x9, 0x2, 0x1, 0x4, 0x3, 0x5, 0x3, 0xffffffffffffffff, 0x1, 0x57, 0x2, 0x7, 0x20, 0x1ff, 0x4], {0x77359400}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0xffffffffffffffbb, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3b0000001400230500000000000000c002000000", @ANYRES32=r3, @ANYBLOB="140006000000000002000000000000000000000014000200fe8000000000000000000000000000aa"], 0x14c}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x4, 0x1}, 0x10) 03:34:02 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x77, 0x1f, 0x3f, 0x6, 0x0, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, &(0x7f0000000280)=0x100) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffffb50f0000080081ec93a230302e4c"], 0x15) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:02 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x3) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x2, 0x0, 0x0, @time={0x77359400}}], 0x30) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 429.731681][T19055] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.4'. 03:34:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:02 executing program 5: openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000040)=0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x6, 0x631, 0x4, 0x7f, 0x45, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x4}, {0x100, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9d1, 0x400, 0x7, 0x7f3c, 0x3f, 0x100}, {0x0, 0x6, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0xf0c}], 0xf49}) fchdir(0xffffffffffffffff) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) statfs(&(0x7f0000000280)='./file0/bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getpeername$ax25(r1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RSTAT(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='Q'], 0x1) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fff) [ 429.811388][T19059] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.4'. 03:34:03 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x77, 0x1f, 0x3f, 0x6, 0x0, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, &(0x7f0000000280)=0x100) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffffb50f0000080081ec93a230302e4c"], 0x15) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:03 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) recvfrom$inet6(0xffffffffffffff9c, &(0x7f0000000280), 0xfffffffffffffd4b, 0x100000000001ffe, 0x0, 0x0) 03:34:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000308) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0xfffffe82) syz_open_procfs(0x0, &(0x7f0000000700)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06nZ\x0e\xae\xef\xa9\xef\x1d\xf6\xbb\xd3\x99\xd2\x1au') dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 03:34:03 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x77, 0x1f, 0x3f, 0x0, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, &(0x7f0000000280)=0x100) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffffb50f0000080081ec93a230302e4c"], 0x15) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:03 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() sched_getaffinity(r1, 0x8, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) inotify_init1(0x400000007fff9) r2 = request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000480)='+\x00', 0xfffffffffffffffe) r3 = add_key(&(0x7f0000000540)='logon\x00', &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)="76ae32d976f48987ef377e37598e733e4365c8c24f5343b776b903a40e3b462a11a22c520c6c88e97e506c8e4d8c4c8057d61a97988f652b95ac691db7b213b7ba91813fc9f1d62997348cf626db2fa8be9059bd9f4db71ab16179bdc28fcf5cf3b407023092e6078c3b5665cb139fb380b2e11785cd71abbc102d53ba2cc7237e086fd691385da824196b867a0e42e7c2cda06d956c3e3b452934e3a3d01854b57f400c1a6a6ae8f9b5c8421046eb56c71bbebe721d139fde610b3e246af8e8328ed73b1917e3", 0xc7, 0xfffffffffffffffb) keyctl$search(0xa, r2, &(0x7f00000004c0)='trusted\x00', &(0x7f0000000500)={'syz', 0x3}, r3) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000240)=""/148, 0x94}], 0x1, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) restart_syscall() setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffac1414aa0100000000ffc35c9dffffac14141de0000001000000000000000030dc850674"], 0x1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) pread64(r0, &(0x7f00000013c0)=""/4096, 0x1000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000200)="a78f2db87262187dd1548ebf18791278c069023351820efef3b7bbd23a9e4892312b5ca8f6abbf7792ded9a498c587f61eb2c200d69d626ed207de3e6f45bada75d0b9b5331d9383a8191421c593abf9dc458c65c1a9373431e1d8e75100c1dfb0f187fdbc10c16a25eeeea9117ac7ae6cb2", 0x72, 0xfffffffffffffffc) clock_gettime(0x0, &(0x7f00000003c0)) 03:34:03 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x77, 0x1f, 0x3f, 0x0, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, &(0x7f0000000280)=0x100) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffffb50f0000080081ec93a230302e4c"], 0x15) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:03 executing program 4: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0x8000, 0x7b) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) setreuid(0x0, 0xee00) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 03:34:03 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) 03:34:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:03 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x77, 0x1f, 0x3f, 0x0, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, &(0x7f0000000280)=0x100) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffffb50f0000080081ec93a230302e4c"], 0x15) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:04 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x77, 0x1f, 0x0, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, &(0x7f0000000280)=0x100) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffffb50f0000080081ec93a230302e4c"], 0x15) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:04 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x7e1a24788f7374b6, 0x2000, 0x0, 0x232807fd) 03:34:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r1, 0xd, 0x0}, 0xe) 03:34:06 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06nZ\x0e\xae\xef\xa9\xef\x1d\xf6\xbb\xd3\x99\xd2\x1au') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) shmdt(0x0) 03:34:06 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x77, 0x1f, 0x0, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, &(0x7f0000000280)=0x100) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffffb50f0000080081ec93a230302e4c"], 0x15) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:34:06 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:34:06 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x77, 0x1f, 0x0, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, &(0x7f0000000280)=0x100) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffffb50f0000080081ec93a230302e4c"], 0x15) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 433.768525][T19147] QAT: failed to copy from user cfg_data. 03:34:07 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000b44707ae02eb4e587970e6d5ed0f5ed31af9e36f037baf500869157b000900ff8f0063001062202025830000000000000002863c3ddb"], 0x1}}, 0x0) clone(0x822102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:34:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) [ 433.985989][T19168] QAT: failed to copy from user cfg_data. 03:34:07 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x800000000006) r1 = dup2(r0, r0) r2 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xac1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xffG\xeb\'\xa19\xf1\x93\"\x80\x7fG3\xc1E\xe6e6\xc6\xc2u\x01% \xe7+0\x97\x84;N\xda\xc4\x80\xc3\xb18N\xbf_\x19_ \xd4_Y%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r1, r2, &(0x7f0000000340)=0x4c, 0xdd) 03:34:07 executing program 3: 03:34:07 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x77, 0x0, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, &(0x7f0000000280)=0x100) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffffb50f0000080081ec93a230302e4c"], 0x15) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:34:07 executing program 3: 03:34:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) [ 434.228287][T19184] QAT: failed to copy from user cfg_data. 03:34:07 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:07 executing program 4: 03:34:07 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x77, 0x0, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, &(0x7f0000000280)=0x100) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffffb50f0000080081ec93a230302e4c"], 0x15) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:07 executing program 3: 03:34:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x40096101, 0x0) 03:34:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x40096101, 0x0) 03:34:07 executing program 4: 03:34:07 executing program 3: 03:34:07 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x77, 0x0, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, &(0x7f0000000280)=0x100) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffffb50f0000080081ec93a230302e4c"], 0x15) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:07 executing program 3: 03:34:07 executing program 4: 03:34:08 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x40096101, 0x0) 03:34:08 executing program 3: 03:34:08 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, &(0x7f0000000280)=0x100) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffffb50f0000080081ec93a230302e4c"], 0x15) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:08 executing program 4: 03:34:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:08 executing program 3: 03:34:08 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, &(0x7f0000000280)=0x100) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffffb50f0000080081ec93a230302e4c"], 0x15) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:08 executing program 4: 03:34:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:34:08 executing program 4: 03:34:08 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffffb50f0000080081ec93a230302e4c"], 0x15) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 435.810090][T19273] QAT: failed to copy from user cfg_data. 03:34:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:09 executing program 3: 03:34:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:09 executing program 4: 03:34:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:34:09 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffffb50f0000080081ec93a230302e4c"], 0x15) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:09 executing program 4: [ 436.443238][T19292] QAT: failed to copy from user cfg_data. 03:34:09 executing program 3: 03:34:09 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffffb50f0000080081ec93a230302e4c"], 0x15) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:34:09 executing program 4: 03:34:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) [ 436.789024][T19315] QAT: failed to copy from user cfg_data. 03:34:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(0xffffffffffffffff, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:10 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 03:34:10 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffffb50f0000080081ec93a230302e4c"], 0x15) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:10 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:34:10 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x1a0}]) 03:34:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:10 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffffb50f0000080081ec93a230302e4c"], 0x15) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 437.307065][T19335] QAT: failed to copy from user cfg_data. [ 437.368609][T19331] Dev loop4: unable to read RDB block 1 [ 437.388024][T19331] loop4: unable to read partition table [ 437.408044][T19331] loop4: partition table beyond EOD, truncated 03:34:10 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:34:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(0xffffffffffffffff, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:10 executing program 3: r0 = socket(0x1e, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x3}, 0x10) 03:34:10 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffffb50f0000080081ec93a230302e4c"], 0x15) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 437.468011][T19331] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) 03:34:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:10 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() timer_create(0x3, 0x0, &(0x7f0000000240)) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000300)) [ 437.654756][T19357] QAT: failed to copy from user cfg_data. 03:34:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(0xffffffffffffffff, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:10 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:34:10 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:10 executing program 3: r0 = socket(0x1e, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x3}, 0x10) 03:34:11 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:11 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) [ 437.948686][T19380] QAT: failed to copy from user cfg_data. 03:34:11 executing program 3: ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x12, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x4) openat$dir(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0xfffffffffffffffc) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6tnl0\x005\xd0\x05\xff\xff\xff\xc3\x00', @ifru_mtu=0x70c000}) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x40801) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x0, 0xfffffffffffffff8, 0x1ba374ff, 0x0, 0x0, 0x45800000}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000159, 0x0) 03:34:11 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x7, 0x4000000000000800) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000040)={0x17, 0xd0, &(0x7f0000000140)="f08746975573e136ceeb0eb683429d2705d83caf0449b9a637b509801a1c960a37920feb52154ce66a517ac494d2b187e2d40f07f8beaaebe925ff2e1ddeefca9cded73bbe1f7f82f53414aa306759765b3de20ddf8a78207b8cd8d868ba48450016ba39fa210ee7d2f67723211b5ce8b025acf7e94fabac742ef374e3f6cf5536e3030bab9642be95115535a6640ff476ff078c74ec71b68f6fd405d366500353c54ea1e084c54e87ec0504e105af2afcba975d492109417a6a04e308beefe9c9ad6f0cd8cba17a4c2c46a8df37d96c"}) 03:34:11 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:34:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:11 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40020000000, 0x0) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xa00, 0x12, r0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x414000, 0x0) mmap$binder(&(0x7f0000e82000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mremap(&(0x7f0000e65000/0x1000)=nil, 0x1000, 0x3000, 0x969e0dd5e0b32e1c, &(0x7f0000ffa000/0x3000)=nil) 03:34:11 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) [ 438.263828][T19407] QAT: failed to copy from user cfg_data. 03:34:11 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:11 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:34:11 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) [ 438.506509][T19426] QAT: failed to copy from user cfg_data. 03:34:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0/file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x26e6, 0x301000) utimensat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={{0x0, 0x7530}}, 0x100) lremovexattr(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="e65a34809dbab58162ecbe6e8d713fc4e40ed7231b2d5fb1f8953a12e0e3d44b0eb1dad504a9d5ffa42bc1eb692680fa077adfed1ac01982cb5200"]) mount$bpf(0x20000000, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x2001002, 0x0) mount$bpf(0x20000000, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x588e, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000280)='(vboxnet1}mime_type\'systemvboxnet1nodevppp0\xe1mime_type\x00', &(0x7f00000002c0)='./file0/file0\x00', r0) 03:34:11 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 438.651258][T19433] QAT: failed to copy from user cfg_data. [ 438.752256][T19442] QAT: failed to copy from user cfg_data. 03:34:12 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:12 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:34:12 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:12 executing program 4: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000480)='/dev/capi20\x00', 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$packet(0x11, 0x400000000002, 0x300) socket$inet6(0xa, 0x3, 0x84) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="aae941e100082dbd7000fedbdf25010000000000000007410000004c001800000000756470000000000000000000000000000000000100"/98], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x24000085) write$rfkill(r1, &(0x7f0000000300)={0x100000001, 0x8, 0x1000000000000002, 0x1, 0x10000003}, 0xa3) 03:34:12 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) [ 438.917110][T19452] QAT: failed to copy from user cfg_data. 03:34:12 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:34:12 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 439.051666][T19467] QAT: failed to copy from user cfg_data. 03:34:12 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:34:12 executing program 4: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = gettid() mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0xffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x74, r4, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8001}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008000}, 0x5) tkill(r0, 0x13) close(r1) 03:34:12 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) [ 439.186778][T19479] QAT: failed to copy from user cfg_data. 03:34:12 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x40096101, 0x0) 03:34:12 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:12 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:34:12 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x40096101, 0x0) 03:34:12 executing program 4: sched_setaffinity(0x0, 0x5, &(0x7f0000000280)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000240)="e93599b3adfaee", 0x7) preadv(0xffffffffffffffff, &(0x7f0000001980)=[{&(0x7f0000001480)=""/153, 0x99}, {0x0}], 0x1000000000000182, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='maps\x00') ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000003c0)=0x0) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000004c0)={0x7, 0x100000001, r2, 0x0, r3, 0x0, 0x0, 0x7f}) r4 = getpgid(0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f00000001c0)={0xc5, &(0x7f00000000c0)="2e4bc75f9a0fc2854d6cef8361f15c097d72ca35f9320e6f527c1961fe7c5e0921e72e14747fa8a830835cb895cca87a84c783d6234a2c2df5b9bf5acaafef56d31a5577e2ed7c0c6fbaa63d52e9a296a9cbf8b495f835ae869cde9283cf9e0052edb0e66156775226b9dd93e1af63ca76d774ec8bc460fcd67e159a5202d768bf98a05881df431a3a0749a2670f676b0d1eebdbdab3f78787539a685fbcb35a4984889982294ebc6656e55268824256e282d4a7a16d6944b313d05a3a7597bab2ff27ad0b"}) sched_setaffinity(r4, 0x8, &(0x7f0000000000)=0x6) preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000340)={0xffffffffffffff80}) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) 03:34:13 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x40096101, 0x0) 03:34:13 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000380)) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) [ 439.891825][T19510] QAT: failed to copy from user cfg_data. 03:34:13 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000380)) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:13 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:34:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) [ 440.282817][T19549] QAT: failed to copy from user cfg_data. [ 440.322877][T19551] QAT: failed to copy from user cfg_data. 03:34:13 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:13 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)}], 0x1, 0x81003) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RMKDIR(r3, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x20, 0x4, 0x8}}, 0x14) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) connect$netlink(r3, &(0x7f0000000380)=@unspec, 0xc) sendfile(r1, r0, 0x0, 0x4000000000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x53afafa, @remote, 0x6}}, 0xcc, 0x75f, 0x0, 0x9, 0x5a}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000280)={0x6, 0x8000, 0x1f11930b, 0x4, r5}, &(0x7f00000002c0)=0x10) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f00000003c0)={0x80, 0x3}) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f00000001c0)={'ah\x00'}, &(0x7f0000000200)=0x1e) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) r6 = getpid() lstat(&(0x7f0000002740)='./file0\x00', &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000002800), &(0x7f0000002840)=0x0, &(0x7f0000002880)) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000028c0)=0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002900)={0x0, 0x0}, &(0x7f0000002940)=0xc) fstat(r1, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpid() r13 = getuid() getgroups(0x7, &(0x7f0000002a00)=[0xee00, 0x0, 0x0, 0xee00, 0xffffffffffffffff, 0xee00, 0xee00]) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000002a40)=0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002a80)={0x0, 0x0}, &(0x7f0000002ac0)=0xc) lstat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = gettid() getresuid(&(0x7f0000002bc0), &(0x7f0000002c00), &(0x7f0000002c40)=0x0) fstat(r3, &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000002d00)=0x0) stat(&(0x7f0000002d40)='./file0\x00', &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = getegid() sendmsg$unix(r3, &(0x7f0000002f00)={&(0x7f0000000400)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000026c0)=[{&(0x7f0000000480)="9f3190cac6197267aaa89975a2a6224fb4b8f4df857edc94ea1c62b810bf9c5d2a23f2eeeb5215f2a0763b817dbe9231de975de035f7ed2d5f020465d633cf009c0bead5559b4a9f9b7c57b398cbd5bee983e9261b200a6ff9a62b63e35dfff8e596dbb5d8e7d53911906f92e6122249cadd8d76114beb18a352465a95aa637cc53735aad97bb541b85d1c34b94aadffd3a8288b", 0x94}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="b20ba3e4e050844ba818726e63b3801d7230b7b0f033f50cdaf3ce5db1f6aa2f5afa79c0c425fee9c91975803f2ed57544a3e9ae32a98d3d4c380af199cf24ab7e72275b8d2c5b548b1db7470d1337874f", 0x51}, {&(0x7f00000015c0)="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", 0x1000}, {&(0x7f00000025c0)="e0c02370e734fbaf45262625c4f17cf794abf267abf755edbd57a5c391095ad45947e388cf4ee071ff923ef231735ffc70af6316bc457ff3a218d9b4db0125095c0a3ae82aa261e420e43fbe0807b5c069b2b27b4943e1c1f71bd03a2a8682c8bfae49bd44d64bc9f265a72804895d5107932ce79a8fcad1859114676af696748cca12f7e18d7ed27d8cddee53ffc012e8277dd25c6edff5a8d0bc0133081acec045a10e8a8989e88506154838c089be3333804661f0f52152a57e19acf1fe5f3ae332728080128dc8365aa53a47a841f19861fe76", 0xd5}], 0x5, &(0x7f0000002e00)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, r20}}}, @cred={{0x1c, 0x1, 0x2, {r21, r22, r23}}}], 0xd8, 0x24000000}, 0x4800) 03:34:13 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000380)) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:13 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:34:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:34:13 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:13 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) [ 440.765139][T19567] QAT: failed to copy from user cfg_data. [ 440.796143][T19563] QAT: failed to copy from user cfg_data. 03:34:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) [ 440.942652][T19580] QAT: failed to copy from user cfg_data. 03:34:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:14 executing program 3: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:34:14 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 441.092729][T19591] QAT: failed to copy from user cfg_data. [ 441.243378][T19600] QAT: failed to copy from user cfg_data. 03:34:14 executing program 4: socket$inet6(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r1, &(0x7f0000000080), 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) renameat2(0xffffffffffffffff, 0x0, r0, &(0x7f00000002c0)='./file0\x00', 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x258, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 03:34:14 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:34:14 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:14 executing program 3: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:34:14 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, 0x0}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) [ 441.653964][T19610] QAT: failed to copy from user cfg_data. 03:34:14 executing program 3: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:34:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) [ 441.816983][T19631] QAT: failed to copy from user cfg_data. 03:34:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:15 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) [ 441.914022][T19639] QAT: failed to copy from user cfg_data. [ 442.011531][T19644] QAT: failed to copy from user cfg_data. [ 442.119911][T19650] QAT: failed to copy from user cfg_data. [ 442.167694][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 442.173634][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 442.397639][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 442.403609][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:34:15 executing program 4: socket$inet6(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r1, &(0x7f0000000080), 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) renameat2(0xffffffffffffffff, 0x0, r0, &(0x7f00000002c0)='./file0\x00', 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x258, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 03:34:15 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, 0x0}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:15 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:34:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:34:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:15 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:15 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:34:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) [ 442.706324][T19669] QAT: failed to copy from user cfg_data. 03:34:16 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, 0x0}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:16 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) [ 442.964791][T19688] QAT: failed to copy from user cfg_data. 03:34:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) [ 443.011072][T19687] QAT: failed to copy from user cfg_data. 03:34:16 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 443.193612][T19696] QAT: failed to copy from user cfg_data. [ 443.197564][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 443.205243][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:34:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5f6c46419704562cded8fe1edab0c055e0bcfec7be070") syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="3e04c5034f05", @random="26a8418cd943", [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @link_local={0x2}, @broadcast, @link_local}}}}, 0x0) fallocate(r0, 0x2, 0xfff, 0xff) r1 = dup(r0) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x76, 0x4000) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, r2, 0x0, 0xa, &(0x7f0000000100)='/dev/vcs#\x00'}, 0x30) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1d0, r5, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x49}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf284}]}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffa}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x29bc}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x114}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x318d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2fa0864c}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x5c, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xed5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}]}, @TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x1d0}}, 0x44010) kcmp(r3, r3, 0x0, r2, r4) 03:34:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:34:16 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:34:16 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) [ 443.600370][T19717] QAT: failed to copy from user cfg_data. 03:34:16 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 443.685171][T19721] QAT: failed to copy from user cfg_data. 03:34:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x8000) write$P9_RFSYNC(r1, &(0x7f0000000040)={0x7, 0x33, 0x1}, 0x7) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000080)={0x8, 0x0, 0x1}) 03:34:16 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:34:16 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={r1, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) [ 443.879323][T19740] QAT: failed to copy from user cfg_data. 03:34:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) [ 444.017402][T19745] QAT: failed to copy from user cfg_data. 03:34:17 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={r1, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:17 executing program 4: stat(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000080)='./bus/file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000280)=@v3={0x3000000, [{0x6, 0xfffffffffffffe01}, {0x2, 0x3ff}], r0}, 0x18, 0x1) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) open(&(0x7f0000000300)='./bus\x00', 0x400, 0x50) lsetxattr$security_selinux(&(0x7f0000000100)='./bus\x00', &(0x7f00000002c0)='security.selinux\x00', 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000040)={0x3f, "2b6348b814f64c06fb0764f26ff3cfb30735266e1e26f5fda673fbaf255e7c60", 0x1, 0x1}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000380)='./bus\x00', &(0x7f0000000540)='trusted.overlay.nlink\x00', &(0x7f0000000580)={'\x05\x00', 0x7}, 0x28, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) 03:34:17 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:34:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) [ 444.114610][T19759] QAT: failed to copy from user cfg_data. [ 444.266728][ T24] audit: type=1804 audit(2000000057.399:129): pid=19765 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir113490758/syzkaller.QhapYp/416/bus" dev="sda1" ino=16708 res=1 [ 444.416568][T19779] QAT: failed to copy from user cfg_data. 03:34:17 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:17 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={r1, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x17a) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:17 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:34:17 executing program 4: capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000240)) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) sysfs$1(0x1, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0xffffff4f) clock_gettime(0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_GET_KEEPCAPS(0x7) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000005a00)=""/4096, 0x1000}], 0x1, &(0x7f0000000180)=""/38, 0x26}, 0x8}], 0x1, 0x0, &(0x7f0000001500)={0x77359400}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000005880)={'gre0\x00', {0x2, 0x4e20, @remote}}) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{&(0x7f0000000ac0)=@alg, 0x80, &(0x7f0000000e40)=[{&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/71, 0x47}, {&(0x7f0000004540)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/30, 0x1d}, {&(0x7f0000006a00)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/83, 0x53}, {&(0x7f0000000d00)=""/108, 0x6c}], 0x386}}], 0x1, 0x0, &(0x7f0000000ec0)={0x77359400}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000000)={0x1000, 0x7ff, 0x4, 0x0, 0x8, 0x951, 0x10, "7632e5df4ffa98b2faec3f51e6392a6e53ef6e02", "6fa45a360928a35fa766d7b7565f2ffc42da2162"}) bind$inet(r2, &(0x7f0000942000)={0x2, 0x4e20}, 0x10) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)={0x3, 0xffffffffffffff9c}) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r2, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg(r2, &(0x7f00000010c0)=[{{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000d40), 0x116, &(0x7f0000000d80)}}], 0x6d7, 0x40400d4) 03:34:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:34:17 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) [ 444.559935][T19793] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure 03:34:17 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:17 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x40096101, 0x0) 03:34:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:34:18 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000200)={@mcast1, r2}, 0x14) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x103, 0x487, 0x0, 0x0) 03:34:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) [ 444.929275][T19821] QAT: failed to copy from user cfg_data. 03:34:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:18 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x40096101, 0x0) 03:34:18 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:34:18 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x10, 0x0) io_setup(0x7, &(0x7f0000000800)=0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e22, 0x7, @empty}, {0xa, 0x4e23, 0x9, @local, 0x4}, 0x3, [0x101, 0x0, 0x100000000, 0x100000000, 0x6681, 0x0, 0x175, 0x7]}, 0x5c) io_submit(r1, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x20000, 0x40000000, 0xf0000000000000, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x2, 0x202, 0xcca, 0xa6, 0x35, 0x5fd4, 0x100000000, 0x0}, &(0x7f0000000180)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYBLOB="1103000000000000005a0278aca27a634f75ca1a03"], &(0x7f0000000200)=0x19) 03:34:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:18 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x40096101, 0x0) [ 445.496236][T19844] QAT: failed to copy from user cfg_data. 03:34:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:34:18 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:18 executing program 3 (fault-call:3 fault-nth:0): ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:34:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) [ 445.729776][T19864] QAT: failed to copy from user cfg_data. [ 445.942126][T19874] FAULT_INJECTION: forcing a failure. [ 445.942126][T19874] name failslab, interval 1, probability 0, space 0, times 0 [ 445.999093][T19874] CPU: 1 PID: 19874 Comm: syz-executor.3 Not tainted 5.2.0-rc3-next-20190607 #11 [ 446.005551][T19879] QAT: failed to copy from user cfg_data. [ 446.008361][T19874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 446.008390][T19874] Call Trace: [ 446.008424][T19874] dump_stack+0x172/0x1f0 [ 446.008461][T19874] should_fail.cold+0xa/0x15 [ 446.037220][T19874] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 446.043064][T19874] ? ___might_sleep+0x163/0x280 [ 446.047944][T19874] __should_failslab+0x121/0x190 [ 446.052922][T19874] should_failslab+0x9/0x14 [ 446.057454][T19874] __kmalloc+0x2d9/0x740 [ 446.061727][T19874] ? tomoyo_realpath_from_path+0xc0/0x7a0 [ 446.067479][T19874] ? rcu_read_lock_sched_held+0x110/0x130 [ 446.073224][T19874] ? tomoyo_realpath_from_path+0xcd/0x7a0 [ 446.078990][T19874] tomoyo_realpath_from_path+0xcd/0x7a0 [ 446.084563][T19874] ? tomoyo_path_number_perm+0x193/0x520 [ 446.090241][T19874] tomoyo_path_number_perm+0x1dd/0x520 [ 446.095727][T19874] ? tomoyo_path_number_perm+0x193/0x520 [ 446.101391][T19874] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 446.107251][T19874] ? __fget+0x384/0x560 [ 446.111438][T19874] ? ksys_dup3+0x3e0/0x3e0 [ 446.115874][T19874] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 446.122136][T19874] ? fput_many+0x12c/0x1a0 [ 446.126629][T19874] tomoyo_file_ioctl+0x23/0x30 [ 446.131416][T19874] security_file_ioctl+0x77/0xc0 [ 446.136373][T19874] ksys_ioctl+0x57/0xd0 [ 446.140535][T19874] __x64_sys_ioctl+0x73/0xb0 [ 446.145138][T19874] do_syscall_64+0xfd/0x680 [ 446.149657][T19874] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 446.155559][T19874] RIP: 0033:0x459279 [ 446.159462][T19874] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 446.179073][T19874] RSP: 002b:00007f4d32f61c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 446.187619][T19874] RAX: ffffffffffffffda RBX: 00007f4d32f61c90 RCX: 0000000000459279 [ 446.195616][T19874] RDX: 0000000000000000 RSI: 0000000040096101 RDI: 0000000000000003 [ 446.203610][T19874] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 446.211690][T19874] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d32f626d4 [ 446.219694][T19874] R13: 00000000004c3aef R14: 00000000004d7650 R15: 0000000000000004 [ 446.238620][T19874] ERROR: Out of memory at tomoyo_realpath_from_path. 03:34:19 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:19 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) [ 446.259644][T19874] QAT: failed to copy from user cfg_data. 03:34:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000022c0)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}, 0x1}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') r1 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="8ff867e3e0f2c0", 0x7, 0xfffffffffffffffb) keyctl$read(0xb, r1, &(0x7f0000000200)=""/4096, 0x1000) preadv(r0, &(0x7f00000017c0), 0x181, 0xfeffffff) 03:34:19 executing program 3 (fault-call:3 fault-nth:1): ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) [ 446.381916][T19890] QAT: failed to copy from user cfg_data. 03:34:19 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:34:19 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, 0x0, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:19 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0x400000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x558}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) [ 446.676344][T19914] QAT: failed to copy from user cfg_data. 03:34:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:34:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:20 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:34:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) getsockname(r0, &(0x7f0000000100)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0x80) stat(&(0x7f0000000400)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x96) 03:34:20 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, 0x0, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) [ 449.176713][ T2568] device bridge_slave_1 left promiscuous mode [ 449.184866][ T2568] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.252623][ T2568] device bridge_slave_0 left promiscuous mode [ 449.258975][ T2568] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.001035][ T2568] device hsr_slave_1 left promiscuous mode [ 451.063540][ T2568] device hsr_slave_0 left promiscuous mode [ 451.106140][ T2568] team0 (unregistering): Port device team_slave_1 removed [ 451.118513][ T2568] team0 (unregistering): Port device team_slave_0 removed [ 451.131150][ T2568] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 451.183271][ T2568] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 451.246518][ T2568] bond0 (unregistering): Released all slaves [ 451.418640][T19968] IPVS: ftp: loaded support on port[0] = 21 [ 451.488612][T19968] chnl_net:caif_netlink_parms(): no params data found [ 451.517089][T19968] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.524688][T19968] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.532900][T19968] device bridge_slave_0 entered promiscuous mode [ 451.541096][T19968] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.548332][T19968] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.556095][T19968] device bridge_slave_1 entered promiscuous mode [ 451.579006][T19968] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 451.589806][T19968] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 451.613679][T19968] team0: Port device team_slave_0 added [ 451.621678][T19968] team0: Port device team_slave_1 added [ 451.700875][T19968] device hsr_slave_0 entered promiscuous mode [ 451.748116][T19968] device hsr_slave_1 entered promiscuous mode [ 451.857272][T19968] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.864471][T19968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.871941][T19968] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.879083][T19968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.959024][T19968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.980237][ T8713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 451.994913][ T8713] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.003497][ T8713] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.027115][T19968] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.042771][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 452.055250][ T2645] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.062434][ T2645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.089476][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 452.098641][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.105766][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.132184][ T8713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 452.141688][ T8713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 452.156395][ T8713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 452.178536][ T8713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 452.189535][T19968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 452.205305][ T8713] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 452.244898][T19968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.387803][T19976] FAULT_INJECTION: forcing a failure. [ 452.387803][T19976] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 452.401076][T19976] CPU: 0 PID: 19976 Comm: syz-executor.3 Not tainted 5.2.0-rc3-next-20190607 #11 [ 452.410198][T19976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.420278][T19976] Call Trace: [ 452.423598][T19976] dump_stack+0x172/0x1f0 [ 452.427955][T19976] should_fail.cold+0xa/0x15 [ 452.432572][T19976] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 452.439186][T19976] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 452.445013][T19976] ? lock_downgrade+0x920/0x920 [ 452.449980][T19976] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 452.456247][T19976] should_fail_alloc_page+0x50/0x60 [ 452.461477][T19976] __alloc_pages_nodemask+0x1a1/0x8d0 [ 452.466869][T19976] ? is_bpf_text_address+0xd3/0x170 [ 452.472086][T19976] ? __alloc_pages_slowpath+0x2900/0x2900 [ 452.477837][T19976] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 452.483675][T19976] cache_grow_begin+0x9d/0x650 [ 452.488459][T19976] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 452.494727][T19976] __kmalloc+0x67a/0x740 [ 452.498995][T19976] ? tomoyo_realpath_from_path+0xcd/0x7a0 [ 452.504732][T19976] tomoyo_realpath_from_path+0xcd/0x7a0 [ 452.510292][T19976] ? tomoyo_path_number_perm+0x193/0x520 [ 452.515941][T19976] tomoyo_path_number_perm+0x1dd/0x520 [ 452.521409][T19976] ? tomoyo_path_number_perm+0x193/0x520 [ 452.527067][T19976] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 452.532940][T19976] ? __fget+0x384/0x560 [ 452.537137][T19976] ? ksys_dup3+0x3e0/0x3e0 [ 452.541585][T19976] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 452.547930][T19976] ? fput_many+0x12c/0x1a0 [ 452.552367][T19976] tomoyo_file_ioctl+0x23/0x30 [ 452.557146][T19976] security_file_ioctl+0x77/0xc0 [ 452.562109][T19976] ksys_ioctl+0x57/0xd0 [ 452.566278][T19976] __x64_sys_ioctl+0x73/0xb0 [ 452.570883][T19976] do_syscall_64+0xfd/0x680 [ 452.575405][T19976] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 452.581311][T19976] RIP: 0033:0x459279 [ 452.585220][T19976] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 452.604833][T19976] RSP: 002b:00007f15e8b7ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 452.613273][T19976] RAX: ffffffffffffffda RBX: 00007f15e8b7ac90 RCX: 0000000000459279 [ 452.621255][T19976] RDX: 0000000000000000 RSI: 0000000040096101 RDI: 0000000000000003 [ 452.629242][T19976] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 03:34:25 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:34:25 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, 0x0, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:25 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = socket$unix(0x1, 0x0, 0x0) r3 = socket$unix(0x1, 0x400040000000001, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xe8) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000340)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, @empty, 0xffffffffffff7fff, 0x5, 0x5, 0x400, 0x2, 0x0, r5}) bind$unix(r3, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r3, 0x0) connect(r2, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r6 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x9, 0x34000) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000100)={{0x0, 0x2, 0x5, 0x3f}, 'syz1\x00', 0x36}) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') sendfile(r2, r7, 0x0, 0x800000bf) bind$bt_sco(r0, &(0x7f00000000c0), 0x8) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) ftruncate(0xffffffffffffffff, 0x0) 03:34:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:34:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:25 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) [ 452.637241][T19976] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15e8b7b6d4 [ 452.645250][T19976] R13: 00000000004c3aef R14: 00000000004d7650 R15: 0000000000000004 [ 452.667329][T19976] QAT: failed to copy from user cfg_data. 03:34:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x40096101, 0x0) 03:34:26 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040)={0x80}, 0x8) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x42, 0x1, 0x9, 0x6, 0x7, 0x81}) [ 452.841525][T19995] QAT: failed to copy from user cfg_data. 03:34:26 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, 0x0, 0xfffffffffffffffc) 03:34:26 executing program 4: socket$inet(0x2b, 0x0, 0x9) 03:34:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x40096101, 0x0) [ 453.039237][T20007] QAT: failed to copy from user cfg_data. [ 453.089132][T20007] QAT: Invalid ioctl 03:34:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/icmp6\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000000)) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) setsockopt$inet6_int(r0, 0x29, 0x37, &(0x7f0000000040)=0xfba, 0x4) 03:34:26 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, 0x0, 0xfffffffffffffffc) 03:34:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x40096101, 0x0) 03:34:26 executing program 4: getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) connect$pptp(r0, &(0x7f0000000100)={0x18, 0x2, {0x9, @broadcast}}, 0x1e) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000040)='{uuser\'$\xda\',.cgroup@-skeyring-ppp0%@\x00', 0x24) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 03:34:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:26 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:26 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, 0x0, 0xfffffffffffffffc) 03:34:26 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x10000fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x210000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000028bd7000fedbdf250f0000000c00030008000300010000002c00010008000b0073697000080004004e23000008000b0073697000080002003b000000080002002f0000001400030008000100020000000800070000000000080006001f000000640003001400060000000000000000000000ffff7f000001080003000400000008000800020000001400060000000000000000000000ffffe0000002140002007465616d5f736c6176655f3000000000140002006272696467655f736c6176655f300000"], 0xcc}, 0x1, 0x0, 0x0, 0x11}, 0x40) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x40096101, 0x0) 03:34:26 executing program 5 (fault-call:4 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:34:26 executing program 2 (fault-call:3 fault-nth:0): add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) [ 453.902557][T20059] FAULT_INJECTION: forcing a failure. [ 453.902557][T20059] name failslab, interval 1, probability 0, space 0, times 0 [ 453.929469][T20060] FAULT_INJECTION: forcing a failure. [ 453.929469][T20060] name failslab, interval 1, probability 0, space 0, times 0 [ 453.963235][T20060] CPU: 1 PID: 20060 Comm: syz-executor.2 Not tainted 5.2.0-rc3-next-20190607 #11 [ 453.972387][T20060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 453.972394][T20060] Call Trace: [ 453.972422][T20060] dump_stack+0x172/0x1f0 [ 453.972451][T20060] should_fail.cold+0xa/0x15 [ 453.972479][T20060] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 453.972504][T20060] ? ___might_sleep+0x163/0x280 [ 453.972531][T20060] __should_failslab+0x121/0x190 [ 453.972555][T20060] should_failslab+0x9/0x14 [ 454.014906][T20060] kmem_cache_alloc+0x2af/0x6f0 [ 454.020125][T20060] ? kasan_check_write+0x14/0x20 [ 454.025089][T20060] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 454.030658][T20060] getname_flags+0xd6/0x5b0 [ 454.035181][T20060] getname+0x1a/0x20 [ 454.039094][T20060] do_sys_open+0x2c9/0x5d0 [ 454.043615][T20060] ? filp_open+0x80/0x80 [ 454.047880][T20060] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 454.053355][T20060] ? do_syscall_64+0x26/0x680 [ 454.053375][T20060] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 454.053396][T20060] ? do_syscall_64+0x26/0x680 [ 454.068878][T20060] __x64_sys_open+0x7e/0xc0 [ 454.073402][T20060] do_syscall_64+0xfd/0x680 [ 454.077919][T20060] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 454.077932][T20060] RIP: 0033:0x413161 [ 454.077948][T20060] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 454.077955][T20060] RSP: 002b:00007f292db0d7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 454.077976][T20060] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413161 [ 454.077984][T20060] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f292db0d850 [ 454.077992][T20060] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 454.077999][T20060] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f292db0e6d4 [ 454.078007][T20060] R13: 00000000004c84d5 R14: 00000000004ded90 R15: 0000000000000004 [ 454.104766][T20059] CPU: 1 PID: 20059 Comm: syz-executor.5 Not tainted 5.2.0-rc3-next-20190607 #11 [ 454.165006][T20059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 454.175078][T20059] Call Trace: [ 454.178396][T20059] dump_stack+0x172/0x1f0 [ 454.182752][T20059] should_fail.cold+0xa/0x15 [ 454.187361][T20059] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 454.193180][T20059] ? ___might_sleep+0x163/0x280 [ 454.193202][T20059] __should_failslab+0x121/0x190 [ 454.193217][T20059] should_failslab+0x9/0x14 [ 454.193230][T20059] __kmalloc+0x2d9/0x740 [ 454.193250][T20059] ? tomoyo_realpath_from_path+0xc0/0x7a0 [ 454.193266][T20059] ? rcu_read_lock_sched_held+0x110/0x130 [ 454.193278][T20059] ? tomoyo_realpath_from_path+0xcd/0x7a0 [ 454.193297][T20059] tomoyo_realpath_from_path+0xcd/0x7a0 [ 454.193311][T20059] ? tomoyo_path_number_perm+0x193/0x520 [ 454.193333][T20059] tomoyo_path_number_perm+0x1dd/0x520 [ 454.193347][T20059] ? tomoyo_path_number_perm+0x193/0x520 [ 454.193366][T20059] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 454.251412][T20059] ? __fget+0x384/0x560 [ 454.251433][T20059] ? ksys_dup3+0x3e0/0x3e0 [ 454.265819][T20059] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 454.272082][T20059] ? fput_many+0x12c/0x1a0 [ 454.276518][T20059] tomoyo_file_ioctl+0x23/0x30 [ 454.281290][T20059] security_file_ioctl+0x77/0xc0 [ 454.286234][T20059] ksys_ioctl+0x57/0xd0 [ 454.286250][T20059] __x64_sys_ioctl+0x73/0xb0 [ 454.286270][T20059] do_syscall_64+0xfd/0x680 [ 454.286296][T20059] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 454.305576][T20059] RIP: 0033:0x459279 [ 454.309488][T20059] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 454.329111][T20059] RSP: 002b:00007fb682232c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 454.337537][T20059] RAX: ffffffffffffffda RBX: 00007fb682232c90 RCX: 0000000000459279 [ 454.337547][T20059] RDX: 0000000000000000 RSI: 0000000040096101 RDI: 0000000000000004 [ 454.337554][T20059] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 03:34:27 executing program 3: open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x0, 0x0) connect(r1, &(0x7f0000000080)=@in={0x2, 0x4e21, @empty}, 0x80) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x40096101, 0x0) [ 454.337563][T20059] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6822336d4 [ 454.337572][T20059] R13: 00000000004c3aef R14: 00000000004d7650 R15: 0000000000000005 [ 454.348066][T20068] QAT: failed to copy from user cfg_data. [ 454.401132][T20076] QAT: failed to copy from user cfg_data. 03:34:27 executing program 2 (fault-call:3 fault-nth:1): add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:27 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x8080000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x1d39}, @window={0x3, 0x4, 0x6}, @window={0x3, 0x9f6, 0x7fffffff}, @window={0x3, 0x3, 0x6}, @mss={0x2, 0x9501}, @mss={0x2, 0x99f}, @mss={0x2, 0x3ff}, @timestamp, @sack_perm], 0x9) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)={0x3, 0x9, 0x80002b7}) [ 454.535343][T20080] QAT: failed to copy from user cfg_data. [ 454.672984][T20088] FAULT_INJECTION: forcing a failure. [ 454.672984][T20088] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 454.686240][T20088] CPU: 1 PID: 20088 Comm: syz-executor.2 Not tainted 5.2.0-rc3-next-20190607 #11 [ 454.694414][T20059] ERROR: Out of memory at tomoyo_realpath_from_path. [ 454.695458][T20088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 454.695466][T20088] Call Trace: [ 454.695493][T20088] dump_stack+0x172/0x1f0 [ 454.695523][T20088] should_fail.cold+0xa/0x15 [ 454.724763][T20088] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 454.730586][T20088] ? __lock_acquire+0x537/0x4af0 [ 454.735528][T20088] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 454.741441][T20088] ? kstrtouint+0x142/0x1a0 [ 454.745976][T20088] should_fail_alloc_page+0x50/0x60 [ 454.751550][T20088] __alloc_pages_nodemask+0x1a1/0x8d0 [ 454.756941][T20088] ? find_held_lock+0x35/0x130 [ 454.761729][T20088] ? __alloc_pages_slowpath+0x2900/0x2900 [ 454.767476][T20088] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 454.773745][T20088] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 454.779571][T20088] cache_grow_begin+0x9d/0x650 [ 454.784359][T20088] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 454.790613][T20088] kmem_cache_alloc+0x628/0x6f0 [ 454.795484][T20088] ? kasan_check_write+0x14/0x20 [ 454.800436][T20088] getname_flags+0xd6/0x5b0 [ 454.804951][T20088] getname+0x1a/0x20 [ 454.809110][T20088] do_sys_open+0x2c9/0x5d0 [ 454.813530][T20088] ? filp_open+0x80/0x80 [ 454.817784][T20088] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 454.823245][T20088] ? do_syscall_64+0x26/0x680 [ 454.827926][T20088] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 454.834019][T20088] ? do_syscall_64+0x26/0x680 [ 454.838718][T20088] __x64_sys_open+0x7e/0xc0 [ 454.843230][T20088] do_syscall_64+0xfd/0x680 [ 454.847751][T20088] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 454.853650][T20088] RIP: 0033:0x413161 [ 454.857550][T20088] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 454.877163][T20088] RSP: 002b:00007f292db0d7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 454.885856][T20088] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413161 [ 454.893919][T20088] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f292db0d850 [ 454.901895][T20088] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 454.909874][T20088] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f292db0e6d4 [ 454.917855][T20088] R13: 00000000004c84d5 R14: 00000000004ded90 R15: 0000000000000004 [ 454.975640][T20059] QAT: failed to copy from user cfg_data. [ 454.997057][T20096] QAT: failed to copy from user cfg_data. [ 455.093311][T20098] QAT: failed to copy from user cfg_data. 03:34:29 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x800, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x3, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000100)) 03:34:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:29 executing program 2 (fault-call:3 fault-nth:2): add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:34:29 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x4, 0x200280) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x20}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xd0}, 0x4000080) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x6, 0x400301) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000080)=0x8) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x24) ioctl$PPPIOCDISCONN(r3, 0x7439) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x40096101, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000000c0)={0x0, r3, 0x5, 0x9, 0x4, 0x8}) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) 03:34:29 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:30 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v1={0x1000000, [{0x758a, 0x851}]}, 0xc, 0x1) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) [ 456.900154][T20111] FAULT_INJECTION: forcing a failure. [ 456.900154][T20111] name failslab, interval 1, probability 0, space 0, times 0 [ 456.908424][T20112] QAT: failed to copy from user cfg_data. [ 456.937722][T20111] CPU: 0 PID: 20111 Comm: syz-executor.2 Not tainted 5.2.0-rc3-next-20190607 #11 [ 456.946895][T20111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 456.956974][T20111] Call Trace: [ 456.957015][T20111] dump_stack+0x172/0x1f0 [ 456.957048][T20111] should_fail.cold+0xa/0x15 [ 456.957069][T20111] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 456.957094][T20111] ? ___might_sleep+0x163/0x280 [ 456.957126][T20111] __should_failslab+0x121/0x190 [ 456.985275][T20111] should_failslab+0x9/0x14 [ 456.989807][T20111] kmem_cache_alloc+0x2af/0x6f0 [ 456.989831][T20111] ? stack_trace_save+0xac/0xe0 03:34:30 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/68) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) [ 456.999556][T20111] ? stack_trace_consume_entry+0x190/0x190 [ 457.005395][T20111] __alloc_file+0x27/0x300 [ 457.009830][T20111] alloc_empty_file+0x72/0x170 [ 457.009853][T20111] path_openat+0xef/0x46d0 [ 457.009870][T20111] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 457.009884][T20111] ? kasan_slab_alloc+0xf/0x20 [ 457.009896][T20111] ? kmem_cache_alloc+0x11a/0x6f0 [ 457.009908][T20111] ? getname_flags+0xd6/0x5b0 [ 457.009920][T20111] ? getname+0x1a/0x20 [ 457.009931][T20111] ? do_sys_open+0x2c9/0x5d0 [ 457.009942][T20111] ? __x64_sys_open+0x7e/0xc0 [ 457.009959][T20111] ? do_syscall_64+0xfd/0x680 [ 457.009992][T20111] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 457.036397][T20111] ? __lock_acquire+0x537/0x4af0 [ 457.036418][T20111] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 457.036433][T20111] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 457.036457][T20111] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 457.049789][T20111] ? __alloc_fd+0x44d/0x560 [ 457.049809][T20111] ? find_held_lock+0x35/0x130 [ 457.049832][T20111] do_filp_open+0x1a1/0x280 [ 457.049852][T20111] ? may_open_dev+0x100/0x100 [ 457.065278][T20111] ? lock_downgrade+0x920/0x920 [ 457.065297][T20111] ? rwlock_bug.part.0+0x90/0x90 [ 457.065321][T20111] ? kasan_check_read+0x11/0x20 [ 457.065337][T20111] ? do_raw_spin_unlock+0x57/0x270 [ 457.065362][T20111] ? _raw_spin_unlock+0x2d/0x50 [ 457.103073][T20129] QAT: Invalid ioctl [ 457.106570][T20111] ? __alloc_fd+0x44d/0x560 [ 457.106603][T20111] do_sys_open+0x3fe/0x5d0 [ 457.106620][T20111] ? filp_open+0x80/0x80 03:34:30 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) [ 457.106647][T20111] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 457.142438][T20131] QAT: failed to copy from user cfg_data. [ 457.144099][T20111] ? do_syscall_64+0x26/0x680 [ 457.144122][T20111] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 457.144135][T20111] ? do_syscall_64+0x26/0x680 [ 457.144160][T20111] __x64_sys_open+0x7e/0xc0 [ 457.179715][T20111] do_syscall_64+0xfd/0x680 [ 457.184248][T20111] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 457.190159][T20111] RIP: 0033:0x413161 [ 457.194074][T20111] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 457.213701][T20111] RSP: 002b:00007f292db0d7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 457.222142][T20111] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413161 [ 457.230143][T20111] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f292db0d850 [ 457.238240][T20111] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 03:34:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x2, 0x0) [ 457.246234][T20111] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f292db0e6d4 [ 457.254228][T20111] R13: 00000000004c84d5 R14: 00000000004ded90 R15: 0000000000000004 03:34:30 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() ptrace(0xffffffffffffffff, r0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000000)={0x3, 0x3a, "1cf894f22c81681fe38466457433f10ff609342577e4253b73da91c39ac2c84bbeea5dbd668820cc200d74d9f21b5d86b36248a87f03ce5adada"}) 03:34:30 executing program 2 (fault-call:3 fault-nth:3): add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 457.322230][T20136] QAT: failed to copy from user cfg_data. [ 457.449932][T20148] QAT: failed to copy from user cfg_data. [ 457.470078][T20152] QAT: Invalid ioctl 03:34:30 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:34:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x10, 0x0) 03:34:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:30 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/38) 03:34:30 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x509, 0x2, 0x40b, 0x9, 0x7, 0x0, 0x7, 0x2, 0x203, 0x38, 0x2dc, 0x4, 0x9, 0x20, 0x1, 0x7, 0x2, 0x5c}, [{0x5, 0x8, 0x1, 0x9, 0x80000001, 0x5, 0xfe, 0x9}, {0x0, 0x1f, 0x3, 0x1, 0xfffffffffffffc00, 0x0, 0xfffffffffffffff9, 0x1000}], "5cbf34093eae46b9342dd02d510cc0e0135bec8b8b4edd4948ec7f08aaa0124cf64a681e6d80e3c1619390892c24d51d0d11f36a447b1d5aba7921c30141d7d519e4cfe3e6655b6b3b", [[], [], [], [], [], [], [], []]}, 0x8c1) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) [ 457.648278][T20164] QAT: failed to copy from user cfg_data. [ 457.661790][T20169] QAT: Invalid ioctl 03:34:30 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x1267, 0x0) [ 457.727607][T20172] QAT: failed to copy from user cfg_data. [ 457.731361][T20173] FAULT_INJECTION: forcing a failure. [ 457.731361][T20173] name failslab, interval 1, probability 0, space 0, times 0 03:34:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) [ 457.804771][T20179] QAT: failed to copy from user cfg_data. [ 457.865173][T20173] CPU: 1 PID: 20173 Comm: syz-executor.2 Not tainted 5.2.0-rc3-next-20190607 #11 [ 457.892107][T20173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 457.892116][T20173] Call Trace: [ 457.892146][T20173] dump_stack+0x172/0x1f0 [ 457.892167][T20173] should_fail.cold+0xa/0x15 [ 457.892186][T20173] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 457.892213][T20173] ? ___might_sleep+0x163/0x280 [ 457.925319][T20173] __should_failslab+0x121/0x190 [ 457.930279][T20173] should_failslab+0x9/0x14 [ 457.934991][T20173] kmem_cache_alloc+0x2af/0x6f0 [ 457.939880][T20173] ? rcu_read_lock_sched_held+0x110/0x130 [ 457.945635][T20173] ? kmem_cache_alloc+0x32b/0x6f0 [ 457.950682][T20173] security_file_alloc+0x39/0x170 [ 457.955727][T20173] __alloc_file+0xac/0x300 [ 457.955745][T20173] alloc_empty_file+0x72/0x170 [ 457.955764][T20173] path_openat+0xef/0x46d0 [ 457.955788][T20173] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 457.964443][T20195] QAT: Invalid ioctl [ 457.965068][T20173] ? kasan_slab_alloc+0xf/0x20 [ 457.965082][T20173] ? kmem_cache_alloc+0x11a/0x6f0 [ 457.965107][T20173] ? getname_flags+0xd6/0x5b0 [ 457.993748][T20173] ? getname+0x1a/0x20 [ 457.997833][T20173] ? do_sys_open+0x2c9/0x5d0 [ 458.002438][T20173] ? __x64_sys_open+0x7e/0xc0 [ 458.002456][T20173] ? do_syscall_64+0xfd/0x680 [ 458.002475][T20173] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 458.002493][T20173] ? __lock_acquire+0x537/0x4af0 [ 458.002517][T20173] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 458.011875][T20173] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 458.011899][T20173] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 458.011920][T20173] ? __alloc_fd+0x44d/0x560 [ 458.011942][T20173] ? find_held_lock+0x35/0x130 [ 458.022945][T20173] do_filp_open+0x1a1/0x280 [ 458.022964][T20173] ? may_open_dev+0x100/0x100 [ 458.022996][T20173] ? lock_downgrade+0x920/0x920 03:34:31 executing program 3: syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x2, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x6, &(0x7f0000000100)=@raw=[@ldst={0x3, 0x1, 0x6, 0x0, 0x1, 0xffffffffffffffc0, 0xfffffffffffffffd}, @exit, @jmp={0x5, 0xfffffffffffffffd, 0x1, 0x0, 0x4, 0xffffffffffffffc0, 0x1}, @alu={0x7, 0x101, 0xf, 0x3, 0x6, 0x0, 0xfffffffffffffffc}, @ldst={0x1, 0xb1b0c41d72edf505, 0x2, 0xa, 0xb, 0x152, 0x8}, @alu={0x7, 0x9, 0xd, 0xf, 0xf, 0x0, 0xfffffffffffffffc}], &(0x7f0000000140)='syzkaller\x00', 0x6, 0xc0, &(0x7f0000000180)=""/192, 0x40f00, 0x3, [], 0x0, 0x1, 0xffffffffffffff9c, 0x8, &(0x7f0000000240)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xd, 0x7, 0x5}, 0x10}, 0x70) ioctl(r0, 0x7, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000480)='/dev/uinput\x00', 0x2000000802, 0x0) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x5) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f00000000c0)=0x1) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x40096101, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000003c0)={0x0, @null, @netrom={'nr', 0x0}, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x5, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) 03:34:31 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) [ 458.035749][T20173] ? rwlock_bug.part.0+0x90/0x90 [ 458.035773][T20173] ? kasan_check_read+0x11/0x20 [ 458.035788][T20173] ? do_raw_spin_unlock+0x57/0x270 [ 458.035807][T20173] ? _raw_spin_unlock+0x2d/0x50 [ 458.035828][T20173] ? __alloc_fd+0x44d/0x560 [ 458.045726][T20173] do_sys_open+0x3fe/0x5d0 [ 458.045745][T20173] ? filp_open+0x80/0x80 [ 458.045766][T20173] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 458.045788][T20173] ? do_syscall_64+0x26/0x680 [ 458.055055][T20173] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 458.055073][T20173] ? do_syscall_64+0x26/0x680 [ 458.055093][T20173] __x64_sys_open+0x7e/0xc0 [ 458.055110][T20173] do_syscall_64+0xfd/0x680 [ 458.055131][T20173] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 458.064636][T20173] RIP: 0033:0x413161 [ 458.064654][T20173] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 458.064662][T20173] RSP: 002b:00007f292dacb7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 458.064676][T20173] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413161 [ 458.064692][T20173] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f292dacb850 [ 458.074469][T20173] RBP: 000000000075c060 R08: 000000000000000f R09: 0000000000000000 [ 458.074478][T20173] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f292dacc6d4 [ 458.074486][T20173] R13: 00000000004c84d5 R14: 00000000004ded90 R15: 0000000000000004 [ 458.142876][T20201] QAT: failed to copy from user cfg_data. 03:34:31 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) [ 458.221948][T20204] QAT: failed to copy from user cfg_data. 03:34:31 executing program 2 (fault-call:3 fault-nth:4): add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x1274, 0x0) 03:34:31 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0xfff, 0x4e20, 0x101, 0xa, 0xa0, 0x80, 0x3b, 0x0, r1}, {0x3, 0x800, 0x2, 0x8, 0x1, 0xffffffff, 0x4, 0x8001}, {0x2, 0x3f, 0x9, 0x9eda}, 0xffffffffffffffc1, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4d6, 0x7c}, 0x2, @in=@remote, 0x0, 0x0, 0x2, 0x25, 0x4, 0x100000001, 0x8}}, 0xe8) [ 458.305312][T20214] QAT: failed to copy from user cfg_data. [ 458.367226][T20219] QAT: Invalid ioctl 03:34:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x4b3a, 0x0) 03:34:31 executing program 4: r0 = getpgrp(0x0) process_vm_readv(r0, 0x0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000380)=""/137, 0x89}], 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x7, 0xffffffffffffffff, 0x1}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000700)='/dev/video1\x00', 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uinput\x00', 0x802, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0xffffffffffffffff, 0x7f, 0x10}, 0xc) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) signalfd(r1, 0x0, 0xc006a188917dc18f) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000200000000002000900400000f76f1a4e000000000003000600000000000200ee00e00900000000000000e8b90002000100000000000000020200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0) exit(0x1ffffffffffffd) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) prctl$PR_GET_TSC(0x19, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000200)) sync_file_range(0xffffffffffffffff, 0x8000000020222, 0x40, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x20000, 0x0) ioctl$TIOCSTI(r4, 0x5412, 0x1f) r5 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x7, 0x40000) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x80, 0x0) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3000040}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="000428bd70deb7b700010044000400200001000a004e240000ffffff0100000000000000000000000000010200cbbc712a02000a004e2400000007fe8000000002000000000000000000bbda00000008000300090000003c0002000800030044285800000100000000000800040006000000080004000004000008000200485d000008e200000b000000080002000200000024000600080001000300e9ff0300020004000200040002000400020004000200040002004400050024000200050000001e000000080004000600000008001c0002000800026a55f71f70f384ed22bab30042020000080003000700000008000100140000004c00090008000200020000000800020008000000000008001100c1ffffff0800010000020000080001000100006e0500000800010000d800000000000000987e84c5a47b88a2b74cb45a3941ed2bede499a19b2863d1ae1e66594e32b5a97aadf0bbcae01b3853223309ddf0e36bb3b327c708ceec3467b04122223142d2f583b1ea44db7e4764ce3ccb5d39e68f92c8da900b3d57c1253c1e4cff65fe60b5971de5e06cc3"], 0x1}, 0x1, 0x0, 0x0, 0xc054}, 0x10) write$P9_RLERRORu(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="200000000701df56002f6465762f62747266f151636f6e74726f6c0000410000"], 0x20) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1ff, &(0x7f0000000000)="c0dca5055e0bcfec7be070b2ba17a508c782b3a67715620f43d6254cbd078034373d1785a7a8ec2852a9b32be383") r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f0000000a00)=ANY=[@ANYBLOB="5bffffffffffffff00000000000000000300000000000000", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="000000000300"/28, @ANYRES32=r4, @ANYBLOB='\x00'/28]) sendto$inet(r6, &(0x7f0000000740)="8b5f1bcfea703f93ec3a0c0000000000000000a9b9d53e50037a0b51bf601d4adc56ed8b38037c9950fad81f0667c6e0a13f60dc57a95bd9a225ddda7700b6813362c8e559537e7449c348a9be28705b9621277193b82ac2360e01040fc2b3b080255c3ebdd28163b8c46d1e6829ea19ba064bdbe778dcdec566157e347fd3603bbce74ed68969f959b7344cbf899d9209725e5e62145d20ebaf436165e835f2eeceed481197ac46774057b132555a5daedd94d9b07d3547996a8bfd6fe72a5368694f14a79caeb169debb00863050dfaa26f0232480b998a39424869fdbd39a6bad3009303ee05d6afc91026a0a060cc3432740445817f27b4af6aa088be092db7939b4bb0adf31e0de2d7d49f88d532f156a6c351c55abc22249e58ccd31324936d8e84ac491e25ebb6c5a03a87db3b1bf878a8fdb853f070000000000000079ec4943184c8818e02a3ad6862c85", 0x14f, 0x1, 0x0, 0x0) getsockopt$llc_int(r7, 0x10c, 0x0, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, &(0x7f0000000380)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000300), &(0x7f0000000340)=0x4) 03:34:31 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) write$P9_RCREATE(r0, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0xffffffffffffffff, 0x3, 0x3}}}, 0x18) ioctl(r0, 0x3, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) [ 458.433077][T20227] QAT: failed to copy from user cfg_data. [ 458.583881][T20240] QAT: failed to copy from user cfg_data. [ 458.618814][T20235] FAULT_INJECTION: forcing a failure. [ 458.618814][T20235] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 458.632079][T20235] CPU: 1 PID: 20235 Comm: syz-executor.2 Not tainted 5.2.0-rc3-next-20190607 #11 [ 458.636126][T20244] QAT: Invalid ioctl [ 458.641310][T20235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 458.641319][T20235] Call Trace: [ 458.641348][T20235] dump_stack+0x172/0x1f0 [ 458.641373][T20235] should_fail.cold+0xa/0x15 [ 458.641398][T20235] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 458.641422][T20235] ? find_held_lock+0x35/0x130 [ 458.678131][T20235] ? is_bpf_text_address+0xac/0x170 [ 458.683357][T20235] should_fail_alloc_page+0x50/0x60 [ 458.688572][T20235] __alloc_pages_nodemask+0x1a1/0x8d0 [ 458.694053][T20235] ? __alloc_pages_slowpath+0x2900/0x2900 [ 458.699796][T20235] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 458.705626][T20235] cache_grow_begin+0x9d/0x650 [ 458.710500][T20235] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 458.711980][T20252] QAT: failed to copy from user cfg_data. [ 458.716775][T20235] __kmalloc+0x67a/0x740 [ 458.716801][T20235] ? tomoyo_realpath_from_path+0xcd/0x7a0 [ 458.716822][T20235] tomoyo_realpath_from_path+0xcd/0x7a0 [ 458.728977][T20253] QAT: failed to copy from user cfg_data. [ 458.732496][T20235] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 458.732526][T20235] tomoyo_check_open_permission+0x2a8/0x3f0 [ 458.732546][T20235] ? tomoyo_path_number_perm+0x520/0x520 [ 458.743948][T20235] ? lock_downgrade+0x920/0x920 [ 458.761681][T20235] ? rwlock_bug.part.0+0x90/0x90 [ 458.761707][T20235] tomoyo_file_open+0xa9/0xd0 [ 458.761724][T20235] security_file_open+0x71/0x300 [ 458.761752][T20235] do_dentry_open+0x373/0x1250 [ 458.776271][T20235] ? kasan_check_read+0x11/0x20 [ 458.785964][T20235] ? chown_common+0x5c0/0x5c0 [ 458.785990][T20235] ? inode_permission+0xb4/0x560 [ 458.800523][T20235] vfs_open+0xa0/0xd0 [ 458.804524][T20235] path_openat+0x10e9/0x46d0 [ 458.809129][T20235] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 458.814951][T20235] ? kasan_slab_alloc+0xf/0x20 [ 458.819737][T20235] ? kmem_cache_alloc+0x11a/0x6f0 [ 458.824781][T20235] ? getname_flags+0xd6/0x5b0 [ 458.829512][T20235] ? getname+0x1a/0x20 [ 458.833592][T20235] ? do_sys_open+0x2c9/0x5d0 [ 458.838213][T20235] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 458.843615][T20235] ? __alloc_fd+0x44d/0x560 [ 458.848143][T20235] ? find_held_lock+0x35/0x130 [ 458.852964][T20235] do_filp_open+0x1a1/0x280 [ 458.857497][T20235] ? may_open_dev+0x100/0x100 [ 458.862206][T20235] ? kasan_check_read+0x11/0x20 [ 458.867093][T20235] ? do_raw_spin_unlock+0x57/0x270 [ 458.872228][T20235] ? _raw_spin_unlock+0x2d/0x50 [ 458.877104][T20235] ? __alloc_fd+0x44d/0x560 [ 458.881642][T20235] do_sys_open+0x3fe/0x5d0 [ 458.886079][T20235] ? filp_open+0x80/0x80 [ 458.890343][T20235] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 458.895825][T20235] ? do_syscall_64+0x26/0x680 [ 458.900527][T20235] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 458.906617][T20235] ? do_syscall_64+0x26/0x680 [ 458.911324][T20235] __x64_sys_open+0x7e/0xc0 [ 458.915860][T20235] do_syscall_64+0xfd/0x680 [ 458.920398][T20235] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 458.926302][T20235] RIP: 0033:0x413161 03:34:31 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:31 executing program 3: r0 = timerfd_create(0xd, 0x80800) ioctl(r0, 0x80000000, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4100c0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x80, 0x0) [ 458.930214][T20235] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 458.949833][T20235] RSP: 002b:00007f292db0d7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 458.958266][T20235] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413161 [ 458.966253][T20235] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f292db0d850 [ 458.975925][T20235] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 03:34:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:32 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl(r0, 0xfffffffffffffe01, &(0x7f0000000000)="840f356adbe8b774ce9fa156fefdf021e4d79b9d67e321bf612bf9f256360263693505e97072a6a379d77f3470ef097965fbc3c62b429e4b4080dffa6bf31b997bf5dab5fe6eab2198d374ff1c3022408788a7480add754e414b8410aa0dc652ad94fc4f15f136f92d83085ae33301d8e77b18f804f644") ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:34:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x4b4d, 0x0) [ 458.983899][T20235] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f292db0e6d4 [ 458.992019][T20235] R13: 00000000004c84d5 R14: 00000000004ded90 R15: 0000000000000004 03:34:32 executing program 3: r0 = socket(0x2, 0x3, 0x8) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) fsetxattr$security_evm(r0, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000140)=@md5={0x1, "f1bb0d87939ae94469fb99a6bf92136f"}, 0x11, 0x1) fcntl$dupfd(r0, 0x0, r0) ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000080)) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x7) [ 459.089410][T20277] QAT: Invalid ioctl 03:34:32 executing program 2 (fault-call:3 fault-nth:5): add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 459.130332][T20282] QAT: Invalid ioctl 03:34:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x4c00, 0x0) [ 459.223698][T20292] QAT: Invalid ioctl [ 459.245667][T20292] QAT: failed to copy from user cfg_data. [ 459.266754][T20296] FAULT_INJECTION: forcing a failure. [ 459.266754][T20296] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 459.280028][T20296] CPU: 1 PID: 20296 Comm: syz-executor.2 Not tainted 5.2.0-rc3-next-20190607 #11 [ 459.280039][T20296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 459.280046][T20296] Call Trace: [ 459.280075][T20296] dump_stack+0x172/0x1f0 [ 459.280102][T20296] should_fail.cold+0xa/0x15 [ 459.280124][T20296] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 459.280139][T20296] ? find_held_lock+0x35/0x130 [ 459.280156][T20296] ? is_bpf_text_address+0xac/0x170 [ 459.280180][T20296] should_fail_alloc_page+0x50/0x60 [ 459.280197][T20296] __alloc_pages_nodemask+0x1a1/0x8d0 [ 459.280218][T20296] ? __alloc_pages_slowpath+0x2900/0x2900 [ 459.280241][T20296] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 459.280264][T20296] cache_grow_begin+0x9d/0x650 [ 459.311875][T20296] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 459.311897][T20296] __kmalloc+0x67a/0x740 [ 459.311921][T20296] ? tomoyo_realpath_from_path+0xcd/0x7a0 [ 459.311940][T20296] tomoyo_realpath_from_path+0xcd/0x7a0 [ 459.311961][T20296] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 459.382830][T20296] tomoyo_check_open_permission+0x2a8/0x3f0 [ 459.388835][T20296] ? tomoyo_path_number_perm+0x520/0x520 [ 459.394489][T20296] ? lock_downgrade+0x920/0x920 [ 459.399345][T20296] ? rwlock_bug.part.0+0x90/0x90 [ 459.404302][T20296] tomoyo_file_open+0xa9/0xd0 [ 459.408997][T20296] security_file_open+0x71/0x300 [ 459.413940][T20296] do_dentry_open+0x373/0x1250 [ 459.418704][T20296] ? kasan_check_read+0x11/0x20 [ 459.423570][T20296] ? chown_common+0x5c0/0x5c0 [ 459.428260][T20296] ? inode_permission+0xb4/0x560 [ 459.433198][T20296] vfs_open+0xa0/0xd0 [ 459.437183][T20296] path_openat+0x10e9/0x46d0 [ 459.441793][T20296] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 459.447687][T20296] ? kasan_slab_alloc+0xf/0x20 [ 459.452446][T20296] ? kmem_cache_alloc+0x11a/0x6f0 [ 459.457477][T20296] ? getname_flags+0xd6/0x5b0 [ 459.462159][T20296] ? getname+0x1a/0x20 [ 459.466213][T20296] ? do_sys_open+0x2c9/0x5d0 [ 459.470841][T20296] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 459.476284][T20296] ? __alloc_fd+0x44d/0x560 [ 459.480816][T20296] ? find_held_lock+0x35/0x130 [ 459.485620][T20296] do_filp_open+0x1a1/0x280 [ 459.490147][T20296] ? may_open_dev+0x100/0x100 [ 459.494848][T20296] ? kasan_check_read+0x11/0x20 [ 459.499700][T20296] ? do_raw_spin_unlock+0x57/0x270 [ 459.504863][T20296] ? _raw_spin_unlock+0x2d/0x50 [ 459.509726][T20296] ? __alloc_fd+0x44d/0x560 [ 459.514241][T20296] do_sys_open+0x3fe/0x5d0 [ 459.518667][T20296] ? filp_open+0x80/0x80 [ 459.522930][T20296] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 459.528411][T20296] ? do_syscall_64+0x26/0x680 [ 459.533105][T20296] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 459.539279][T20296] ? do_syscall_64+0x26/0x680 [ 459.544013][T20296] __x64_sys_open+0x7e/0xc0 [ 459.548526][T20296] do_syscall_64+0xfd/0x680 [ 459.553030][T20296] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 459.558921][T20296] RIP: 0033:0x413161 [ 459.562831][T20296] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 459.582611][T20296] RSP: 002b:00007f292db0d7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 03:34:32 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)="22a61935977d8a9a27e02b64a5c586e6611f941325327c6ffd808472e7085e6c8ba5ba2fcf53a8b34aa513", 0x2b, r0}, 0x68) 03:34:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) [ 459.591296][T20296] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413161 [ 459.599282][T20296] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f292db0d850 [ 459.607267][T20296] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 459.615253][T20296] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f292db0e6d4 [ 459.623248][T20296] R13: 00000000004c84d5 R14: 00000000004ded90 R15: 0000000000000004 [ 459.700320][T20302] QAT: Invalid ioctl [ 459.728794][T20315] QAT: Invalid ioctl 03:34:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x4b3a, 0x0) 03:34:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x4c01, 0x0) [ 459.803515][T20319] QAT: failed to copy from user cfg_data. 03:34:33 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:33 executing program 2 (fault-call:3 fault-nth:6): add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:33 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200000, 0x0) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) [ 459.943136][T20323] QAT: Invalid ioctl [ 459.989851][T20329] QAT: Invalid ioctl 03:34:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x540b, 0x0) [ 460.027204][T20338] QAT: failed to copy from user cfg_data. [ 460.065811][T20346] FAULT_INJECTION: forcing a failure. 03:34:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x4b3a, 0x0) 03:34:33 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) syslog(0x0, &(0x7f0000000140)=""/4096, 0x1000) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) fcntl$setpipe(r0, 0x407, 0x8) ioprio_set$uid(0x0, r1, 0x8) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000012c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2081a}, 0xc, &(0x7f0000001280)={&(0x7f0000001180)={0xc4, r2, 0x300, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffffff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffffffffffa}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x380000000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3bcf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xdc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffffffffffb}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x44}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x4) [ 460.065811][T20346] name failslab, interval 1, probability 0, space 0, times 0 [ 460.091189][T20339] cgroup: fork rejected by pids controller in /syz3 [ 460.159064][T20346] CPU: 0 PID: 20346 Comm: syz-executor.2 Not tainted 5.2.0-rc3-next-20190607 #11 [ 460.168236][T20346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 460.178306][T20346] Call Trace: [ 460.181618][T20346] dump_stack+0x172/0x1f0 [ 460.185983][T20346] should_fail.cold+0xa/0x15 [ 460.190604][T20346] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 460.196479][T20346] ? ___might_sleep+0x163/0x280 [ 460.196513][T20346] __should_failslab+0x121/0x190 [ 460.206388][T20346] should_failslab+0x9/0x14 [ 460.210914][T20346] __kmalloc+0x2d9/0x740 [ 460.215173][T20346] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 460.215190][T20346] ? d_absolute_path+0x11b/0x170 [ 460.215202][T20346] ? __d_path+0x140/0x140 [ 460.215225][T20346] ? tomoyo_encode2.part.0+0xf5/0x400 [ 460.230923][T20346] tomoyo_encode2.part.0+0xf5/0x400 [ 460.230944][T20346] tomoyo_encode+0x2b/0x50 [ 460.230965][T20346] tomoyo_realpath_from_path+0x1d3/0x7a0 [ 460.245975][T20346] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 460.246004][T20346] tomoyo_check_open_permission+0x2a8/0x3f0 [ 460.246029][T20346] ? tomoyo_path_number_perm+0x520/0x520 [ 460.257934][T20346] ? lock_downgrade+0x920/0x920 [ 460.257950][T20346] ? rwlock_bug.part.0+0x90/0x90 [ 460.257971][T20346] tomoyo_file_open+0xa9/0xd0 [ 460.257989][T20346] security_file_open+0x71/0x300 [ 460.258010][T20346] do_dentry_open+0x373/0x1250 [ 460.258024][T20346] ? kasan_check_read+0x11/0x20 [ 460.258045][T20346] ? chown_common+0x5c0/0x5c0 [ 460.258063][T20346] ? inode_permission+0xb4/0x560 [ 460.258081][T20346] vfs_open+0xa0/0xd0 [ 460.274497][T20346] path_openat+0x10e9/0x46d0 [ 460.274515][T20346] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 460.274535][T20346] ? kasan_slab_alloc+0xf/0x20 [ 460.284330][T20360] QAT: Invalid ioctl [ 460.289178][T20346] ? kmem_cache_alloc+0x11a/0x6f0 [ 460.289195][T20346] ? getname_flags+0xd6/0x5b0 [ 460.289207][T20346] ? getname+0x1a/0x20 [ 460.289217][T20346] ? do_sys_open+0x2c9/0x5d0 [ 460.289243][T20346] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 460.289262][T20346] ? __alloc_fd+0x44d/0x560 [ 460.289277][T20346] ? find_held_lock+0x35/0x130 [ 460.289295][T20346] do_filp_open+0x1a1/0x280 [ 460.289311][T20346] ? may_open_dev+0x100/0x100 [ 460.289333][T20346] ? kasan_check_read+0x11/0x20 [ 460.289347][T20346] ? do_raw_spin_unlock+0x57/0x270 [ 460.289364][T20346] ? _raw_spin_unlock+0x2d/0x50 [ 460.289374][T20346] ? __alloc_fd+0x44d/0x560 [ 460.289394][T20346] do_sys_open+0x3fe/0x5d0 [ 460.289409][T20346] ? filp_open+0x80/0x80 [ 460.289428][T20346] ? trace_hardirqs_on_thunk+0x1a/0x1c 03:34:33 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x400100) recvfrom(r0, &(0x7f0000000200)=""/225, 0xe1, 0x20, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x1ff}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000140)={r1, 0xb6, "314a2d3e3add82fe88f7362c872a28017fc3465fc4e2796cc78b090bf62282fe7ddff5c27e6b85e98d7543ec191fa0a145bfef2cde7769d6c61f6166fd814d321a0ad97b9bf44492db448c97a803754ac4d3f950a35f56443eddcf87fb1739e11ac4857d161e3754149274bbd5ef13c941a29bbeb7166c6d030a63deefdcc43e0be78838cf1d73b4f7007dbe7cb9e7228d8d5b499f7500f6de54e92912e7e6e2e253da1fcef2588df333686d26c96d7ae8a7d24aa5bb"}, &(0x7f00000000c0)=0xbe) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x40096101, 0x0) write$uinput_user_dev(r0, &(0x7f0000000300)={'syz1\x00', {0x100, 0x8, 0x9, 0xff}, 0x34, [0x20, 0x2, 0x9090, 0x7, 0x1, 0x0, 0x1000, 0x0, 0xfffffffffffffff8, 0x5, 0x6, 0x3, 0x7, 0x3f, 0x8, 0x2b30, 0xfffffffffffffe01, 0x9, 0x100000000, 0x401, 0xe1a, 0x7, 0xffffffff, 0xa85, 0x9, 0x7, 0x4, 0xe2a9, 0xfffffffffffeffff, 0x0, 0x6f5, 0x8, 0xfffffffffffffff8, 0x3ff, 0x800, 0x8, 0x9, 0x10000, 0x800, 0x200, 0x955, 0x8, 0x1ff, 0x2, 0x7, 0x3, 0x401, 0x1, 0x0, 0x3, 0x6c, 0x8, 0x5, 0xfff, 0x2, 0x6, 0x41, 0x1f, 0x20000000000000, 0x990c, 0x6, 0xaf, 0x57a, 0x6], [0x8001, 0x10000, 0x2, 0x6, 0x5, 0x2, 0x6, 0xaee, 0xfffffffffffffff7, 0x3, 0x9, 0x5, 0xb5da, 0x6, 0x1, 0x100000000, 0x101, 0x513, 0x786, 0x7fffffff, 0x5, 0x2, 0x9, 0x20, 0x9, 0x7, 0x9, 0xba, 0x8ebe, 0x8, 0x401, 0x40, 0x2dc08c58, 0x10001, 0x7656, 0x3, 0x8, 0x20, 0x1, 0x3, 0x40000, 0xff, 0x8, 0x0, 0x8, 0x0, 0x9, 0x365, 0x372, 0x5, 0x2, 0x2, 0x8, 0x4, 0x8, 0x0, 0x0, 0x8, 0x40, 0x8, 0x0, 0x7, 0x5f3, 0x7f], [0xffffffff00000001, 0x300000000, 0x7ff, 0x5, 0x3c0e, 0x0, 0x6ef, 0x2, 0x2, 0xffffffff, 0x4, 0x2, 0x8, 0x9, 0x4, 0xfffffffffffffffb, 0xfffffffffffffbff, 0x3, 0x7, 0x3, 0x7, 0xfff, 0x9, 0x5c, 0x7, 0x9, 0x4, 0xfffffffffffffff7, 0x4ba0, 0x7e, 0x7, 0x100, 0x9, 0x6ea, 0x0, 0x0, 0x9, 0x6, 0x8, 0x4, 0x2, 0x9, 0x8001, 0x7fff, 0x6eec, 0x1, 0x400, 0x1b75, 0x100, 0x9, 0x6, 0x100000000, 0x5, 0xdbc8, 0x7f, 0x6, 0x40, 0x7, 0x0, 0x1, 0x7fffffff, 0x401, 0x80000000], [0x2240, 0x67, 0xfffffffffffeffff, 0x10000, 0x564, 0x7, 0xffffffff, 0x3, 0x101, 0x6, 0x7ff, 0x6, 0x400, 0x8, 0x0, 0x4, 0x0, 0x81, 0x8, 0x4590, 0x751, 0x401, 0x7, 0x4c31, 0xfffffffffffffffe, 0x81, 0x2000000000, 0xfffffffffffffff7, 0xfff, 0x4, 0x9, 0x4, 0x0, 0x0, 0x539, 0x39, 0x0, 0x4, 0x5, 0x7fff, 0x5, 0x80000001, 0x100000000, 0x9, 0x7fff, 0xffffffff, 0x3, 0x9, 0xfffffffffffffffb, 0x2, 0x1743, 0x3, 0xff, 0xea, 0x5, 0x8, 0xb4, 0x400, 0x0, 0xffffffffffffffff, 0x4d3, 0x7ff, 0x1, 0x401]}, 0x45c) [ 460.289450][T20346] ? do_syscall_64+0x26/0x680 [ 460.303749][T20346] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 460.327807][T20346] ? do_syscall_64+0x26/0x680 [ 460.327828][T20346] __x64_sys_open+0x7e/0xc0 [ 460.327843][T20346] do_syscall_64+0xfd/0x680 [ 460.327864][T20346] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 460.327875][T20346] RIP: 0033:0x413161 03:34:33 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 460.327890][T20346] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 460.327897][T20346] RSP: 002b:00007f292db0d7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 460.327910][T20346] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413161 [ 460.327917][T20346] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f292db0d850 [ 460.327925][T20346] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 460.327932][T20346] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f292db0e6d4 03:34:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x4b3a, 0x0) [ 460.327948][T20346] R13: 00000000004c84d5 R14: 00000000004ded90 R15: 0000000000000003 [ 460.387233][T20365] QAT: failed to copy from user cfg_data. [ 460.431181][T20370] QAT: Invalid ioctl [ 460.460630][T20346] ERROR: Out of memory at tomoyo_realpath_from_path. [ 460.488372][T20373] QAT: failed to copy from user cfg_data. 03:34:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5421, 0x0) 03:34:33 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='nr0\x00', 0x10) ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x480}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x8, 0x70bd2d, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x74, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9705}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000240)={0x7fffffff}) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000280)=0x600108) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000007ffc4a8b81f1f0c6bc1252f8fc5d173d24e0944e808285a965538e9a385da58836f24bfcbe6dbb8ee4903cf92bb3087034054c8c4a6d17942f8b3d0a34a95cfdcb1ce7555129d3209ab0e6d5c8dde2b07c8bb2ca280d168785cb66edb6bab3b71bb4b777e80450a4980f651cc174ef47ea4355e7430e27a46e3e0e12530bc65e3fbfa8ee090f2ac8e674a72137014559596eca445d522d0000000000000000000fbb33b70cee8beae1589c3f5306a55eb139fe220b30fc6365675334ddbb6bb1f0c950923aec1b2d5ebac1dafea52fa1f5f408dab6734d0da8ad1259a94abe976555fc7514285de43ef39aa799156c36a82d66e2e5a1362007406a1c8006824399c35a1b", @ANYRES16=r4, @ANYBLOB="00022dbd7000ffdbdf2504000000340001000800010002000000080004004e2100000800090021000000080002007f0000000800020009000000080006006c630000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x84) socket(0x0, 0x5, 0x8) [ 460.681335][T20382] QAT: Invalid ioctl [ 460.825995][T20394] QAT: Invalid ioctl 03:34:34 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5450, 0x0) 03:34:34 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='\\dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:34 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000140)={'eql\x00', 0x8001}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000040c0), 0xfffffe12) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, 0x2}, 0x50) [ 460.858473][T20394] QAT: Invalid ioctl [ 460.864615][T20394] QAT: failed to copy from user cfg_data. 03:34:34 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/.ev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5451, 0x0) 03:34:34 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @remote}}, 0x2, 0x681}, &(0x7f0000000140)=0x90) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e24, 0x97fe, @mcast1, 0x7}}}, 0x84) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1402008}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0xc, 0xffffffffffff4d3a, @udp='udp:syz0\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000844}, 0x50) ioctl$TIOCSSOFTCAR(r2, 0x40096101, 0x0) 03:34:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:34 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='//ev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5452, 0x0) [ 461.243426][T20532] QAT: failed to copy from user cfg_data. 03:34:34 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/\\ev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:34 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:34 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000140)="5e93bf603a72f0a2d295322cf80f1a3f5f6b283c33cfee7cc0eaa40db8af79edc3a769b1e2d92562375b17d0ea5130a230e0f886ecda1da47c556cebb75db3e66a33e9a91b1d398212cb64ac843438942360719b0397950a4bbb313d67e692187165298d478e872716ae80011bac09cbf3525c205c617d75749074f40d919046f0cd16e719e8e7f451b0ab4d4eb04da169c2ebe2b594c7fabaa2407a81e2593f0f0cf3f47118aaddc542e8dbf2eb80d41097f27ab615ca853e91d6b09803a8043e2b8ed8c4cc1a838e6136479b8a432ea0425815375cc141b5", 0xd9, r1) sync_file_range(r0, 0x0, 0x5, 0x1) 03:34:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5460, 0x0) 03:34:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:34 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/d%v/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:34 executing program 4: syz_mount_image$gfs2(&(0x7f0000000380)='gfs2\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)={0xfffffffffffff001, 0x9, 0x4, 0x20000, {0x0, 0x7530}, {0x3, 0x0, 0x18000000000, 0xb5, 0xe6b, 0x8b6, "74167c6f"}, 0x39, 0x7, @userptr=0x7, 0x4}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xfffffffffffffe78, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r3 = getpgrp(0x0) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x11e0, 0x2a, 0x200, 0x70bd2b, 0x25dfdbfc, {0x9}, [@generic="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", @generic="79492f6265d8df0694da1e9f6b6c5e3fda822930d156b20cd6986a8fdea20bbe13ff2f9a21a87ce643d998c65040d41389f9f9ccf20d2d8b519b25a2e5c81446728e340e29ea0ed19cc6d87eb1e380ef1f223f2a1562ad5c257b57c6373d5ca0db5f29679381de130bb73fffc620eb3cfa18db79ceb1835a3fd8c09835b63dccaf019e9baa8da7a947c43a70f89fd6761310e592effe3b55ec629350a71103b15f4142cc9cbb90979903754fda1c21f5c7efa0433277f182980aecc7eeba6e5f4fd85c09f0daa8ac35dd3e17060f2ab1bba170c39c18c2286bcb87fb0ae73565d089a40033", @generic="239bcee7addd78c66afbe447a6ab46e204abc7715c2a303f8682e1757a0b93b23c49e04433a767e5e60c4bcdaf8f2df4f73d0649d756aefbc062215e607024625f5b18f8b930042b4a115f5ad3b60615cb585d8b51543c63dcd422b038b3e4d2326c83bad5f5769999ed8794e3058ba04408697ef0c74bf7f176352ba53cb3194af3a8ed74624c9800eae1bba2ad119fb1dd8285b6818ddd", @generic="9b5f941b288ec14ce80049d31beace3196e07b68000ab36607cc0026a81e897342b9d381269b0b655353f4b1079f1d509bcc44aef9c96c19b615e0a34afb8026bfd194a7", @typed={0x8, 0x3, @pid=r3}]}, 0x11e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x64d4a0af2c893d44) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) [ 461.843636][T20668] QAT: failed to copy from user cfg_data. [ 461.873407][T20671] gfs2: not a GFS2 filesystem 03:34:35 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/d\\v/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x54a0, 0x0) [ 461.910287][T20680] QAT: Invalid ioctl [ 461.954936][T20671] gfs2: not a GFS2 filesystem [ 462.000954][T20779] QAT: Invalid ioctl 03:34:35 executing program 4: mkdir(&(0x7f0000000100)='./control\x00', 0x0) r0 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) getsockopt$inet_opts(r2, 0x0, 0x4, 0x0, &(0x7f00000001c0)=0xff1f) r3 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f00000001c0)='./control\x00', r3, &(0x7f0000012ff6)='./control\x00') renameat2(r3, &(0x7f0000bee000)='./control\x00', r0, &(0x7f000003a000)='./control\x00', 0x2) 03:34:35 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fff}, 0x8, 0x800) ioctl(r0, 0x1, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x3c1100, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000100)) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x100000001, 0x20000) readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=""/114, 0x72) syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x1f, 0x840) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x20100, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x40096101, 0x0) 03:34:35 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/de\\/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 462.150639][T20797] QAT: Invalid ioctl 03:34:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) [ 462.208603][T20808] QAT: Invalid ioctl [ 462.259130][T20803] QAT: failed to copy from user cfg_data. 03:34:35 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x6364, 0x0) 03:34:35 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7d4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2a40}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x4000, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000580)='memory.events\x00', 0x2761, 0x0) write$cgroup_int(r2, &(0x7f0000000080), 0x297ef) 03:34:35 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev\\radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:35 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3f12847d, 0x40) ioctl$VT_ACTIVATE(r0, 0x5606, 0xfffffffffffffffc) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000002180)="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") r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001140)='/dev/qat_adf_ctl\x00', 0x43d, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x2008}) 03:34:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x8903, 0x0) [ 462.747719][T20935] QAT: failed to copy from user cfg_data. 03:34:36 executing program 4: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/de\\/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:36 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/.adio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x8905, 0x0) 03:34:36 executing program 3: ioctl$TUNGETDEVNETNS(0xffffffffffffff9c, 0x54e3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x1, 0xffffffffffffff9c}) r0 = fsmount(0xffffffffffffff9c, 0x0, 0x2) ioctl(r0, 0xfffffffffffffffc, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:34:36 executing program 4: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/de\\/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 463.200777][T21075] QAT: failed to copy from user cfg_data. [ 463.221876][T21073] QAT: Invalid ioctl [ 463.230429][T21094] QAT: Invalid ioctl 03:34:36 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(0xffffffffffffffff, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:36 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev//adio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:36 executing program 4: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/de\\/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x8912, 0x0) 03:34:36 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0x1c, @empty, 0xfffffffffffff6dd}}}, &(0x7f00000000c0)=0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r1, 0xffffffff}, 0x8) [ 463.656507][T21190] QAT: failed to copy from user cfg_data. [ 463.721192][T21191] QAT: Invalid ioctl 03:34:36 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000480)=0x7ffff) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x2, 0xa92d, 0xffff, 0x2, 0x1}, &(0x7f0000000580)=0x98) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000005c0)={r2, 0x101}, 0x8) recvmsg$kcm(r1, &(0x7f0000000400)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/128, 0x80}, {&(0x7f0000000140)=""/187, 0xbb}, {&(0x7f0000000200)=""/250, 0xfa}, {&(0x7f0000000300)=""/80, 0x50}], 0x4, &(0x7f00000003c0)=""/25, 0x19}, 0x41) close(r0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000000700)=0xe8) sendmsg$can_raw(r1, &(0x7f0000000800)={&(0x7f0000000740)={0x1d, r3}, 0x10, &(0x7f00000007c0)={&(0x7f0000000780)=@can={{0x0, 0x1, 0x9, 0x4}, 0x3, 0x3, 0x0, 0x0, "c679684dfe1366d3"}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) write$P9_RRENAMEAT(r1, &(0x7f0000000440)={0x7, 0x4b, 0x1}, 0x7) 03:34:36 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/\\adio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x8919, 0x0) [ 463.758935][T21227] QAT: Invalid ioctl 03:34:36 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(0xffffffffffffffff, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:37 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0xee13}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r1, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}}}, 0x84) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000000)={0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$TIOCSSOFTCAR(r2, 0x40096101, 0x0) 03:34:37 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/r\\dio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:37 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(0xffffffffffffffff, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:37 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="8c", 0x1}], 0x1) mmap$xdp(&(0x7f0000738000/0x2000)=nil, 0x2000, 0x1000001, 0x2000000851, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="14002cbd7000fcdbdf250b00008c7e7ea90a2f0e2391820054000900080001ff0f000000880001000200000008000100017d57691d05f4ed3f01000008000200080000000800020003000000080002000000010008000200010400000800020000000022080001000100503492c527466dfaa21bedd9302b980d0f3285890bdb0381848d8dc30c719258c974b9cfd3d462a8031bcbaa1d9706abce8876974330b8bcc7870b88e662c504abdd3ef7d495c970e457c534659b50106e6af2fac39eb7f935ab79ff5c625a62dcd13c4b60f8319a98babad342fa5179242aa820d1ea80ab8e537dc5cb99ad107a1f5740d5e34d556baede298ee2c578914b969184031791f4831d1f836c2b0af3b4044d70e75bbdfc64070ab20ee2322e1cd16fc6203ce2c5fb4be8472583c3533c0655adf67ab57377de1be5a9f941320d3ce023b4d82b83316e41a5e96a0465c93067a45963d151a1c892624e050a914b6761207274e7c86b44850c8e0ae59b31071d6e16407ec4d3259ceefdf7efcc97e4996bfc0b70b8982f6ececfad252f5b3b"], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x1) [ 464.026242][T21321] QAT: Invalid ioctl [ 464.045249][T21321] QAT: failed to copy from user cfg_data. [ 464.053031][T21316] QAT: Invalid ioctl 03:34:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x8931, 0x0) 03:34:37 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:37 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/ra.io#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:37 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000)=0xfffffffffffff100, &(0x7f0000000040)=0x4) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) [ 464.375788][T21447] QAT: Invalid ioctl 03:34:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x8933, 0x0) 03:34:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:37 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/ra/io#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 464.523771][T21464] QAT: failed to copy from user cfg_data. 03:34:37 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) [ 464.564079][T21468] QAT: Invalid ioctl 03:34:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0x78) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="c0dca5055e0bcfec7be070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000003580)=""/4096, 0x1019d}], 0x1, 0x0, 0x1d4}}], 0x400000000000014, 0x0, 0x0) [ 464.669299][T21537] QAT: Invalid ioctl 03:34:37 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/ra\\io#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:37 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x210000, 0x0) ioctl$TCSETXW(r0, 0x5435, &(0x7f0000000040)={0x2, 0x0, [0xaa2, 0x405d, 0x2, 0xffffffffffffffee, 0xe78d], 0x8}) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:34:37 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x8940, 0x0) 03:34:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x89e9, 0x0) [ 464.980903][T21605] QAT: failed to copy from user cfg_data. [ 465.000722][T21608] QAT: Invalid ioctl 03:34:38 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:38 executing program 4: exit(0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000580)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 03:34:38 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/rad%o#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 465.115882][T21639] QAT: Invalid ioctl 03:34:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) [ 465.189701][T21706] QAT: Invalid ioctl 03:34:38 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x90001, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x1, 0x4) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) socket$l2tp(0x18, 0x1, 0x1) 03:34:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0xae01, 0x0) 03:34:38 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:38 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/rad\\o#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0xae41, 0x0) 03:34:38 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:38 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x24000, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000040)="4cdbf426b9b7ade216e2ecab42d302583cfb2e0dc2d2ab5edcc8e4067176b67b21df87afe957ebf514e116d56a958aee3e552040c9e25b0cb45e25d99b16542a9a2cb5034e62321d142aeea4fb4bdfc3b5d372d4b898fb51a161f9c94b41cf2a716fec357528a1d780a58c6da9c8f8af70b79db0b597adeba610c4b5e3ad2f13"}, 0x10) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './file0', [{0x20, '/dev/qat_adf_ctl\x00'}, {}, {0x20, '\',]wlan1'}, {0x20, '/dev/qat_adf_ctl\x00'}, {0x20, '[$%'}, {0x20, 'GPLsecurityvboxnet1proc%'}, {0x20, '@keyringwlan0\x00'}, {0x20, '{cgroupkeyringem1'}, {0x20, '/dev/qat_adf_ctl\x00'}], 0xa, "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"}, 0x1089) 03:34:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:38 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radi\\#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 465.743552][T21863] QAT: Invalid ioctl [ 465.821620][T21875] QAT: failed to copy from user cfg_data. 03:34:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0xae41, 0x0) 03:34:39 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x02', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0xae80, 0x0) 03:34:39 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:39 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000140)=0xe8) getgroups(0x4, &(0x7f0000000180)=[0x0, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff]) fchown(r0, r1, r2) 03:34:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:39 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:39 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x03', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 466.111578][T21992] QAT: failed to copy from user cfg_data. [ 466.181597][T21997] QAT: Invalid ioctl [ 466.239559][T22085] QAT: Invalid ioctl 03:34:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x400443c8, 0x0) 03:34:39 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xc60, 0x40000) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000080)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000180)={{0x3, 0xf9150baef65fadfc, 0x2, 0x33, 'syz1\x00', 0x8}, 0x6, 0x3c, 0x2, r1, 0x5, 0x2, 'syz1\x00', &(0x7f0000000140)=['/dev/midi#\x00', '/dev/autofs\x00', '/dev/midi#\x00', '\x00', '/dev/autofs\x00'], 0x2f, [], [0x5, 0x0, 0x40, 0x3f]}) clone(0x80040000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x40096101, 0x0) [ 466.299728][T22075] QAT: Invalid ioctl 03:34:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={0x0, 0x0, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) r1 = socket$tipc(0x1e, 0x7, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) 03:34:39 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:39 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x04', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x400454ca, 0x0) [ 466.522171][T22128] QAT: Invalid ioctl 03:34:39 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:39 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000000c0)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000440)={0x2c0, 0x0, 0x1, [{{0x6, 0x1, 0x100, 0x4, 0x0, 0x5, {0x6, 0x7, 0x8, 0x7f, 0x2, 0x79, 0x480, 0x800, 0x9, 0xaf27, 0xfffffffffffffffc, r1, r2, 0x7, 0x400}}, {0x1, 0x4, 0xd, 0x5, '\x1dvmnet1cgroup'}}, {{0x1, 0x1, 0x6, 0x6, 0x7, 0xfffffffffffffeff, {0x5, 0x9, 0x3f, 0x7ff, 0x4, 0x5, 0x4, 0x5, 0x3ff, 0x2643, 0x1, r3, r4, 0x0, 0x56}}, {0x1, 0x9, 0x11, 0xfffffffffffffff9, '/dev/qat_adf_ctl\x00'}}, {{0x0, 0x2, 0x2e, 0x6, 0xffffffff, 0x8, {0x6, 0x9, 0x7, 0x1, 0x0, 0x0, 0x5, 0x2, 0x800, 0x401, 0xfffffffeffffffff, r5, r6, 0x8, 0x10000}}, {0x6, 0xfff, 0x11, 0x10000, '/dev/qat_adf_ctl\x00'}}, {{0x3, 0x0, 0x4, 0x40, 0x6, 0x24, {0x0, 0x7fff, 0xff, 0x3, 0x9, 0x80, 0x9, 0xffffffff00000000, 0xfffffffffffffffd, 0x1, 0x67a, r7, r8, 0x9, 0x3}}, {0x1, 0x0, 0xa, 0x5, '/-]-system'}}]}, 0x2c0) 03:34:40 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) bind$isdn(r2, &(0x7f00000000c0)={0x22, 0x80000000, 0x200, 0x6, 0x800}, 0x6) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x10000000) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6}}, 0xe8) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000280)) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:34:40 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) [ 466.833129][T22260] QAT: Invalid ioctl 03:34:40 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x05', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40046103, 0x0) 03:34:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) [ 466.982449][T22270] QAT: failed to copy from user cfg_data. 03:34:40 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x06', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:40 executing program 4: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xe) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) getsockname$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000180)=0x10) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) [ 467.110453][T22286] QAT: failed to copy from user. 03:34:40 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) [ 467.136687][T22326] QAT: failed to copy from user. 03:34:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40046104, 0x0) 03:34:40 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x401, 0x400) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) clone(0x10000fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:34:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:40 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\a', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:40 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0", 0x8) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:40 executing program 4: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) memfd_create(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x400000000800040) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000100)=[@exit_looper], 0x1000, 0x0, &(0x7f00000003c0)="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"}) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000008580000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108000000000021855e9d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000380)={0x401, 0x0, 0x3, 0x2, "88d54774198ccbe2f3f24a423992d975bae014c2e1acf64da43be9737a44effa"}) 03:34:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40046207, 0x0) 03:34:40 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\b', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:40 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0", 0x8) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) [ 467.702161][T22490] QAT: Invalid ioctl 03:34:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40049409, 0x0) 03:34:41 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:41 executing program 3: ioctl(0xffffffffffffffff, 0xfffffffffffffffc, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:34:41 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0", 0x8) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:41 executing program 4: nanosleep(0x0, 0x0) delete_module(&(0x7f0000000000)='#\x9f\x8e\x02', 0xa00) personality(0x4000005) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4001, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0) dup2(r0, r1) 03:34:41 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x4008af30, 0x0) [ 468.078905][T22567] QAT: failed to copy from user cfg_data. 03:34:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:41 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf", 0xc) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:41 executing program 4: r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x11, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000000000000007663616e30000000000000000000000062726964676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000b91b53133a60b2cdcc6924c4c244c9c46f32f40c0c4fc399ab80e70c3c6ee308bf5671953d6c5d9d0280a8338e6a0110946293cd083b2eccd4f90fca1e3178b67c56df8d74dc2ad685cad60e177c816fbbbf3959b8b4f400baaee7a8a424621a02c2cf04b1482c10f750323ec9ff47eebf3177b75bdf981560821fc30024d23e8c9fd9a876db52a70f6fad7c"]}, 0x44c) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x8, 0x100) write$9p(r1, &(0x7f0000000d00)="b0902e62abd5b354d54b6a3b9c67939ec97f97b2292af555373b32a21d08f12d52a631b400ab4cd1113187e1f4653781518ff6f7a4dfe0024d846eb39bc2148435b4c4b3c05374dbb14b3377bffd6292101dae260b32f263411019cba98e2094bcdb7926c512ba82b400b86f899fe559ae05c9e73791ef00c0fa753b68da5316d2ffd858b4ca98b465cc79da4a81f6f52849eb528b59376f22771503d145232c9bb4de7d3b787e9842b064e3b8a5f8ad976a4a04fb113bb90eaab2c257b1f2bc0bfcd8f716c309dff6833ab9edb0ead7007d34b2bf9856de88ff2ad33fdeb37e1d8943c661d4c9aecf91b7cd532f00e86c520aed3fa26db46581166954207fa1957e28538cf29082873ecef516fbee38e486a31f8ff579a5f840e777110b2d4d185cbffda42534d3cf15d5b474b14c459b9b91228fcd6703e171555589b85eeaa2d4520fbb40f06eea9c6b7479c6816294849507d407c8977b404ed5c69c7bc2c9573ce86cb6504923347957c2fbc60afcae7074feb56e2c2cdc452fed823cb1ef4ebbe6f88357e4422ebb68a3977c49bcf5ce9ce7738c7e20ea2619bf3f3378b6ac5b775dc50bf08b758b50648313ef96bf78a1c2053cedcb36bd71327b3fa42e7e768772de19fb0f803fef2eb44ff53cb330676218d39d428a5142f51c7dbed1104852e4374ed235688c9fb06ab53949f3985b43e343846d08ea7081482fbb9753faae12a1bc70763486c7b1803076f1c7bdf253d4e04fb3fef62ad5af114ebb0349a44362330644d2e85d5263b23dbcc5d8a7e09ea99300922ca5a9f1a57c30b4482fa390dc23acac4f418223150768644afd4dd923ff14dccc9704cd9e32f3c2e740dc885c9ee2e57bea3c593b4541610a6512610c878455d69660b32919b12d6270204b867f5eb3bd3a9525038d41e64560c6d985a469b1e1572ab81cb2fe81a88ff05b4f3dc95361e51621d1439565d366a94f284c01a44034df8418d0ca10e63eb37c88f1ee84a6461118d4eda9f866ae1861dfdaf584bca8c982ca21f5150ce431facd396abb649cc4ec11a508bc62d3ac1ca7714a4b6b5ee5d49651ed2871d4d3c27c8535d2eca2157af5c725e258f5c04d5acb1b28f7de79a33c3b73cabfd4b65cb4d7d3edb8e3dabf8612ccefb6083c9941bc056fa6273c06e2d0c7008c3a7ba94d7924b85f80d5aada12ce3aa287d2114441a5c215a46101c5aa8691b8d7efdd5cab3de2d2e292f20582b896e27735562d54dec95d8df56aa754a1015eae8b4735db9c5a094b47adf9c4b44250f13e874f67f1b30947f2f40fa66193f501a0b6477040d5255b1dac1bb13693897d96b9f3ca7d1729278292e49b9bd14d3f1dfa994c817afc0230a68f147f3b84e5f321a9b4cd34b394c84dcac43b65de5f3170462209b1ec5f4046cc8717c3b2f358bd78ee2391d523dbf764c7526333bf98b70c32e7d59bd0e2f9c32c1066c933d910b047bcf2431f1e541e24459c69cad4da486a4c5a172692c89879efa33222ec89faf7612430aeff587e582214429b3f8b6c7624920f5691f23f2cc35f5bd01dbe2eba810f28e1c805657266c8e9b4288f81ba762c8ac7249278b77243830bacd02d0fa9330da891a440c186023a25d9695c7227c627aff1a8a764197aa83f4d35da356dc9ffb33ded292979fc72f3821aaafb1341f58b6b07fb780bac9043dac4b65b4d0c6c2928bbde0e741ed46505f257d5aff9026681bed826fca53760a129811da158105db659bf4041e1aba43079a107688b6e49b9ccdb0baa81c5a438b714b0d3eb0817185df8ca08c052a34ea7fb42418576eb45ad3bfa2c26cadc0fc1030dd628097a54fac98e3df6a47caf62019ecb62395437f242c71cab4b822bb4b43dee0803e1a95cea8d8ffb88641cbac365b3c5c0f49b11fd871484e7eeb7e6fdb6c190f0f42b28432d5435332f929944638c6eb13d5bbecc8b54bebea901835b9ce26e0a036a61cdec823217396760a800fd6217e76718b60cb03d0b77be1a2662e2cdee64b6d4786e64a6b423e99aaeffedcc49d45e18fff7631b834504c65c4fbe29e5578d30b2810ac3838021376ff33e1fefff1c2e3e97a456950abc3347369f0c87f7d029127a275b54c3a7d7051e77aba3580aaf1e738391d3e92c7fe192bb71d2613dc9733d9ea082665b80285585f94626c3330e2f5e923de95c4172795a6badf97d2a49d6cc7a66e7d7a80d8588d32b3920e40e48c9c1dc979e5917ced37ff602a202b77d2dfa0b7cf272d6bdeedb68442875e4015142eee12295a8e6f688e99ceb00d850eb484480a5c419e48b5c60d2edee5554931d680d3f42e10056cf8dcf9279e21128be8992834aeda7f7fa959ccc03dbbd8fb45404c3625809242d11173fe670d821f3d84a032a904af5f2248056f6003ccec076d2e21755300e16ae12d9c38a66c04dcfabd48580d27b49f10ae906e825c58ece2f514e4619274bc780a35cefc599df7b6f7318a66efcc7bc78a0788d2cf4d09ba2f8820d72e8775fe04533d9976ff6845503d67bf5d4b0fd3e6938427ee92fe35d2a11db7562f2226fe2a242824e33f743dbb31721735cd12fb75550457c03db081158c6afdd9830e193e0254f2a75660c1140617f5a41c9b0cf7d0d61fff29f43340722aaa8f7f280a12040edc2a3e53d891dd8ea6c6c742f4926fa0577b5255442a9d2ef0c95d7b5ccb77d924b379a186f41e1ad638f24c5c2d441febd7340b5463788dcaffbdc3ef9b6916ab8181871be86c70bcfe522ac283d6d855d09e2903100e151dbe5e64fa89a23547101ef086b277be19ec05309d0a64fdf247ef6d12f30226341854d5c6cb7f26a57dcc73690f94f447b3f332f995969a002a4573a89997b893ceb2b734c18e7f2d2a8f4843ca782fb3f314cbdf8452b3cb2f23b891b60263a1fb9078b6f1bba4c416db005949a051a9451f13f9e2039e6d8e33db37723e9b72efa54a158c9cf77a1d0c782df16773e5b80f13a91b153a8e1fe5e928bf2d31cf12da2067942bbac018259fbc35c5ca7a3ef1db5b4b0509f7f008c417ffb9733551965f25992fdc680dd9dfcfd502f5ac337cef899db00475427cf38718610b42d5a92c6c779526ef9c8ef33271df577b7183f04b4ddb8e2ada7f93a07676dbd94b9810eac018e58cda28a87544ae46cae3cb8d43dfeeeb671d90e2f4a4d27d1b12b8fe682b3b7779ead11791c1cd7195ed622195f4774821eace08b98e90374728c5773150a328b94dbef5a6519e4707b606b82694c55b5b2487ad69c91d79011ed44268183abec89829e100f9c33a28310c4f09157417fda109d0254dbb32d665cd2959b8ee6d3c65452b0cc1d92e67feb73f51ae6f6c4473c73c005ec8960b6bb61376e6a48c29e6653626907e7a7ccee6b0b3fbcc0a4dce5df840d9fd1bf9ac65fff57f6329ed2764368f5971c0a9027491d48a9d879ca5be6af55c4000cf3f31962d8be2a2abcba33e078d2066af5f60a6144d5da5161990c243a49c89e6ea999e125f5ca7a8592e58258df51d92909e9cb35a607060ef2f6cc31273af10185f1858bbb903aee0bf27e702bfa8b61d6f152bac4b275eadf6258b1a4f887143b151bd0f1b22d9a371d9f125ff5d35994397fb1838f9094766c215a466bc05662af141c8ca1c6b7a250e6fe1773765165f615ccd062d06b8054cd4031007428d06c30a884c1985ca2472efba31f2f6d9a8b6cee052fe9781d8edc4a48a7cfd2ab5ebf0e01d8c86c3cc1af6788e7c89102785a7c9aa7fbb5daef6fc290410760d479da27f90802128ceb741e13ba66108b05fe2091dd0b810f2aba8cdf4f4b05e5c9a2e71821794a91dec6c5cc025b8de42eab132b670c281b4dbfd34beff79798fc84a3ff81dcd3bb95d08097f16c8e8c5f4d917594497a12d4647def13a7f38ffb425e326d88e4aceff41c6081fd29d07d8b608c02e461be44640580e027e5f39cb8cb0c33ac3eda128a76a71bb09f543fcaf988d35fd4947124067f1d898cdba3e58140dc5d321efec16c3fb319fc0f36ed120b4312a0c6d29b3425e925a2e04b79c88448017e7cfa70ea184a5f4b4aeacc771c07e0453d2edf17ff1791bcc40ea1762190c3c56877f4f62fb9222f3e2dc70c63b78b10e7125d413f19f9b6d628f9dd2886317e53eafe0cf532c41725c50b326979e312af8f3f4fd24120c2e320a18c0664a360d4c0f7d81ec6ce3678dae388dddc69b6bd51e4b34f2cb916ee1c9d165cee06727c7db7c6bbf3bce502a43b4064a45ec2b33fa36f52578b32ed8cb744c41367c0be7acafb9afaa3ce3dac43ec36ac37e3ca5b44b81d6d75f14232564a8bb6bf9f959fbd370cead61df055e18da65d94454afe4dd33e458a5a383565bfc30359f2b916c9045859479375a6d88c8846eb4f29eb2fe8a731b49fee95c2a8a345311e924443c72eb14afb9332053d7af932e0e1d5ab14e39f5f9a6166bbbd294aa11762dc403f0cd27126f544bf2506b1253a3189d23a61ef0f84de524a54ad296e2e61ce1175b5b56a5eadebf5ca40f9f2b1d2212b300d6a5b9584556d8ff301d6855ade8ae36f01aeba4e4f0fa7bcefddc1efb00b3f7fee98799437e8e561a549a5776db96c9b17bebb8f489837be57a4e061ec404707c254905fddcc354967b6ebad275db629b8671738ebac4822d09577ea7906aa4ae5ff8897df945b0db0f6c8c2902111bb79fa5a20ee4682b197dfdbed5472082603826f1a74f9e00f833150db1a7fe5c5aad316b986c7da540c7e6bc71e94b917ff4dd68eb8040af9102a973f1d08906aa55a851d79f54eab88a7f063f64ac4a756963e984bfe117126370df36b4b5330933eb3da2b5f4491891e368886e3c05d965f4dc9dac5000263e44338f2f612ed7bec1fbbcc655697c0c93500fc02375eda584ba926b4791242776eab430b437a6cb5a58050cc8a96d44613b339f58afb01bd73c8f0c6313880b54539e3a63af8a21dd7a75c444b9cecb530b8d5aff88594ce95e48926c1beefd6f8cb60f8367accda79566a0f35af2c7a667aed772ff74a7b4b37da78b3adc6316a37e2512571191c78637a6771377767b41aa644703e7490e876bd04a271b8095c59a41b2efbe2e9841356b55e846e45e48f7e8ad13c50ddc1a271cb8beebbcd3ce6921a2eb4bbcd8a83d1a43bb630f4f5f383d525fddf969db873c381056b283c8f202e56ae7d74869479d9a46f056c820c403e8998baed77e93fea2247eb7bd84c528b3b1aa429d5f3a1674e46edb30d2e68db9d43a21bdab47e75089bc9df5c7a43c431e8a9d6eb7daf642e73452258435758eee2da06160c3b0ef6d438eba9f0f479015d6d27b2b78816cce25dbae6cf0b1e082a0827fc29f1b0f2740b1b16ffc94a64aeeff27b80da5467bab1a1a919f69005a0d5615ecec4fa033785b2d44405d1e631a605ca9a478134a38a87201b4321d1130a92b0b04b60c916801cdf22d313df88fc301f310ff5c2fa15986b4899ec23f150734961e08bfec53b59f30ced34b48aa46716ad4fbaed5c8432b8b5ed3c6414b3446569172db2ecadf9b6861494909ef739b68bfff67518e54615910128545a31ec8efb8d5ae927a156479d8b2503346cd1a7fdb01a3f2fc55643f6e00ca33b677bb78ef8ac605f7185f22a36f945429d283854aacc209142b94253c4076c887ee76f377cc1d555ab5315c38faa8882218de1416b7fa07ff36e7430d3b5d697bcbaf18d7d89182fc6a1f3d9c51e0b841728e3c88e4748b23e401c130100a83f063a9ca2345367a9311f", 0x1000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', r2}) ioctl$SIOCRSACCEPT(r0, 0x89e3) 03:34:41 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:41 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0xa0240, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000000)={0x5, 0x8, 0xe1}) 03:34:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) 03:34:41 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf", 0xc) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x4008af30, 0x0) [ 468.480989][T22704] QAT: failed to copy from user cfg_data. 03:34:41 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 468.579877][T22716] QAT: Invalid ioctl 03:34:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:41 executing program 4: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xb, [@func={0x6, 0x0, 0x0, 0xc, 0x1}, @volatile={0x2, 0x0, 0x0, 0x9, 0x3}, @typedef={0x1}, @enum={0x4, 0x2, 0x0, 0x6, 0x4, [{0x3, 0x6}, {0xe, 0x7}]}]}, {0x0, [0x5f, 0x61, 0x7f, 0x7f, 0x5f, 0x6f, 0x30, 0x61, 0x30]}}, &(0x7f00000001c0)=""/81, 0x63, 0x51}, 0x20) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e22, 0xae6b, @remote, 0x2}, {0xa, 0x4e20, 0x6, @local, 0x8}, 0x1fffffffe0000000, [0x1ff, 0x10000, 0x7, 0x8, 0xfb4, 0x8, 0x8, 0x20]}, 0x5c) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1) [ 468.656845][T22741] QAT: failed to copy from user cfg_data. 03:34:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096102, 0x0) 03:34:41 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf", 0xc) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:41 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000000c0)=@req={0x28, &(0x7f0000000080)={'batadv0\x00', @ifru_settings={0x70a, 0x9, @fr_pvc=&(0x7f0000000040)={0x1000}}}}) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x9, 0x0) 03:34:42 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096103, 0x0) 03:34:42 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd", 0xe) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) [ 468.992936][T22846] QAT: Invalid ioctl [ 469.023990][T22846] QAT: Invalid ioctl [ 469.058680][T22846] QAT: failed to copy from user cfg_data. 03:34:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) 03:34:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) [ 469.102625][T22852] QAT: Invalid ioctl 03:34:42 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:42 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd", 0xe) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096104, 0x0) 03:34:42 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f00000002c0)=0xc) sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0x63f) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000340)="a8e64d71d591fdaeea00a2838fa0c47d6b9a088400d93bec92dc0a065584cf6ac0d90714bca9a73d6b071eb9a158356854c0e7dde81aa4a0ebd1a2465bac4127e2b8d065a9440e2207effe509b5e202f303a5108ead1fd966570b214c30ec5dbbd7952d753be74b0ae587e2ef0fea9aec61c6b57b9c0172db986938a55a4a46900b5d6bde60e1b864038fa", 0x8b}], 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x7, @local, 0x2}}, 0x81, 0xcd1a, 0x98, 0x5, 0x11}, &(0x7f00000000c0)=0x98) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000200)={r2, 0x3f}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000440), 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x9a7, @ipv4={[], [], @local}, 0x6}, {0xa, 0x4e21, 0x1ff, @ipv4={[], [], @empty}, 0x2}, 0x7, [0x6, 0xffff, 0x4, 0x9, 0x80000000, 0x81, 0x200, 0x80]}, 0x5c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000280)=0x4, 0xfffffffffffffcd0) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={r2, 0x9, 0x9}, 0x8) [ 469.318648][T22973] QAT: failed to copy from user cfg_data. 03:34:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) 03:34:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096105, 0x0) 03:34:42 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd", 0xe) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:42 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 469.488784][T22990] QAT: failed to copy from user cfg_data. 03:34:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) [ 469.572758][T22995] QAT: failed to copy from user cfg_data. 03:34:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) 03:34:42 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 469.678282][T23047] QAT: Invalid ioctl 03:34:42 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b", 0xf) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) [ 469.773716][T23110] QAT: Invalid ioctl 03:34:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096110, 0x0) 03:34:43 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = semget(0x1, 0x3, 0x20) semctl$SEM_STAT(r0, 0x3, 0x12, &(0x7f0000000480)=""/135) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x20000) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x10, 0x4) execveat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000100)='^keyring%em1ppp1eth1++\x00', &(0x7f0000000140)='/dev/qat_adf_ctl\x00', &(0x7f0000000180)='-ppp1}vmnet1eth0eth0#+--\x00', &(0x7f00000001c0)='/dev/input/mice\x00', &(0x7f0000000200)='/dev/qat_adf_ctl\x00', &(0x7f0000000240)='/dev/qat_adf_ctl\x00', &(0x7f0000000280)='+securitywlan1/\x00', &(0x7f00000002c0)='$ppp1\x00', &(0x7f0000000300)='@%}!\x00', &(0x7f0000000340)='lo\x00'], &(0x7f0000000440)=[&(0x7f0000000400)='%\x00'], 0x1000) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffd, 0x0) accept4$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000580)=0x14, 0x80800) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000005c0)={@mcast2, r3}, 0x14) ioctl$TIOCSSOFTCAR(r2, 0x40096101, 0x0) [ 469.832868][T23115] QAT: failed to copy from user cfg_data. 03:34:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x40096100, 0x0) 03:34:43 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:43 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b", 0xf) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096125, 0x0) 03:34:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x40096100, 0x0) 03:34:43 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffc, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:34:43 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 470.249538][T23245] QAT: Invalid ioctl 03:34:43 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b", 0xf) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) [ 470.330142][T23260] QAT: Invalid ioctl 03:34:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x40096100, 0x0) 03:34:43 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x5, 0x0, [], [{0x4, 0x6555, 0x2, 0x100000000, 0x1, 0x5}, {0x7, 0x2, 0x7, 0x6, 0x88d, 0x10000}], [[], [], [], [], []]}) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:34:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x400c4301, 0x0) 03:34:43 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:43 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) 03:34:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x4018620d, 0x0) [ 470.746390][T23388] QAT: Invalid ioctl [ 470.761756][T23396] QAT: Invalid ioctl [ 470.774052][T23396] QAT: failed to copy from user cfg_data. 03:34:43 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:43 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 470.829911][T23404] QAT: failed to copy from user cfg_data. 03:34:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) 03:34:44 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0xa0000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x52) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x800, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:34:44 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:44 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) [ 471.063750][T23523] QAT: failed to copy from user cfg_data. [ 471.081478][T23524] QAT: Invalid ioctl 03:34:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) 03:34:44 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 471.131856][T23524] QAT: Invalid ioctl 03:34:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) [ 471.173666][T23530] QAT: failed to copy from user cfg_data. 03:34:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x4020565b, 0x0) 03:34:44 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) [ 471.277795][T23553] QAT: failed to copy from user cfg_data. 03:34:44 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) 03:34:44 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80007, 0xd7c7) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in, @in6=@local}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x7fff, 0x0, "70d926b00e0cf26cadf5d6f5fa5cc6e24ccf01926568c01b3f96cabbd64abee3946ea298ffec8e75e91419f20674b228d118c950614d4b46e1f50827a0b68a6cc700a204c4fa72f9a4352cd25ee9ffab"}, 0xd8) clone(0x1008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000002c0)={r2, 0x0, r1}) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:34:44 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 471.482397][T23654] QAT: Invalid ioctl 03:34:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x4020940d, 0x0) 03:34:44 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) [ 471.600713][T23660] QAT: failed to copy from user cfg_data. 03:34:44 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) [ 471.701437][T23667] QAT: Invalid ioctl 03:34:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) [ 471.754585][T23667] QAT: Invalid ioctl 03:34:44 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) [ 471.779510][T23667] QAT: failed to copy from user cfg_data. [ 471.816511][T23683] QAT: failed to copy from user cfg_data. 03:34:45 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x4020ae46, 0x0) 03:34:45 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) 03:34:45 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x10040000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000000)={0x7, 0xffff}) 03:34:45 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x4030582a, 0x0) 03:34:45 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) 03:34:45 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 472.109618][T23802] QAT: failed to copy from user cfg_data. 03:34:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:45 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) [ 472.334167][T23836] QAT: failed to copy from user cfg_data. 03:34:45 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) 03:34:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40445637, 0x0) 03:34:45 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:45 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:34:45 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) 03:34:45 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\xff', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 472.571883][T23938] QAT: failed to copy from user cfg_data. 03:34:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) [ 472.719184][T23952] QAT: failed to copy from user cfg_data. 03:34:45 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) 03:34:45 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(0xffffffffffffffff, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) [ 472.833359][T23955] QAT: Invalid ioctl 03:34:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x4090ae82, 0x0) 03:34:46 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 472.874897][T23964] QAT: failed to copy from user cfg_data. 03:34:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:46 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\xf6', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:46 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) [ 473.049020][T24034] QAT: failed to copy from user cfg_data. [ 473.082822][T23991] QAT: Invalid ioctl 03:34:46 executing program 3: syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x1000, 0x4400) socket$packet(0x11, 0x0, 0x300) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:34:46 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) [ 473.169415][T24090] QAT: failed to copy from user cfg_data. [ 473.190826][T23991] QAT: Invalid ioctl 03:34:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x80045017, 0x0) 03:34:46 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 473.331397][T24104] QAT: failed to copy from user cfg_data. 03:34:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) 03:34:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x800454d2, 0x0) [ 473.413423][T24125] QAT: failed to copy from user cfg_data. [ 473.452498][T24137] QAT: Invalid ioctl [ 473.629557][T24228] QAT: Invalid ioctl 03:34:46 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(0xffffffffffffffff, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:46 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000000)) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 03:34:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) 03:34:46 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x80084504, 0x0) [ 473.810631][T24242] QAT: Invalid ioctl [ 473.865011][T24242] QAT: failed to copy from user cfg_data. [ 473.903278][T24244] QAT: failed to copy from user cfg_data. 03:34:47 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 473.916245][T24247] QAT: Invalid ioctl 03:34:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) [ 473.950695][T24276] QAT: Invalid ioctl 03:34:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x8008563f, 0x0) 03:34:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:47 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400000040883, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:34:47 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 474.120291][T24372] QAT: failed to copy from user cfg_data. [ 474.266754][T24388] QAT: failed to copy from user cfg_data. 03:34:47 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(0xffffffffffffffff, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7510}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) 03:34:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x80086301, 0x0) 03:34:47 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:47 executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={0x3f}, 0x8, 0x80800) ioctl(r0, 0x80000001, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f0000000000)={0x7, 0x15, 0x1}, 0x7) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:34:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) [ 474.729491][T24509] QAT: failed to copy from user cfg_data. 03:34:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x80087601, 0x0) [ 474.775763][T24505] QAT: failed to copy from user cfg_data. 03:34:47 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) 03:34:48 executing program 3: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl(r0, 0x1000, 0x0) clone(0x40001000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000140)={0x1, 0x0, [{0x1d000, 0x64, &(0x7f0000000080)=""/100}]}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x40096101, 0x0) 03:34:48 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0xc0045878, 0x0) [ 474.956487][T24629] QAT: failed to copy from user cfg_data. 03:34:48 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, 0x0, 0x0, 0x0, &(0x7f0000008bc0)) 03:34:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) 03:34:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:48 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0xc0045878, 0x0) 03:34:48 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000000)={0x0, 0x3, [{r0, 0x0, 0x1000000008000, 0x1000000}, {r0, 0x0, 0x0, 0xfffffffffffff000}, {r0, 0x0, 0x1000000000000, 0xfffff000}]}) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) [ 475.637799][T24759] QAT: Invalid ioctl 03:34:48 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0xc0189436, 0x0) [ 475.672181][T24759] QAT: failed to copy from user cfg_data. [ 475.705180][T24762] QAT: failed to copy from user cfg_data. 03:34:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) 03:34:49 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:49 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x0, 0x2) ioctl$KDDELIO(r0, 0x4b35, 0x1f) ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) [ 475.923664][T24885] QAT: failed to copy from user cfg_data. [ 476.072396][T24895] QAT: failed to copy from user cfg_data. 03:34:49 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, 0x0, 0x0, 0x0, &(0x7f0000008bc0)) 03:34:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) 03:34:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0xc018aa3f, 0x0) 03:34:49 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:49 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) fchmod(r0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) [ 476.563357][T25015] QAT: failed to copy from user cfg_data. [ 476.582542][T25010] QAT: Invalid ioctl 03:34:49 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0xc0205649, 0x0) [ 476.617037][T25017] QAT: failed to copy from user cfg_data. 03:34:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) 03:34:49 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:50 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl(r0, 0x0, &(0x7f0000000000)="04ca8934fa4a4453000b9c48c2f9035c1c66e2cdfa7a292298270b9f8f37e1bfeec1a64a655d72e5562bede76a4a7d99092bae1ef3bac12ae5631dca57f6c55877d8f242b04d469f3e2be8296b7b1693c559eb4b49362276f3de5e19e77b4102f58847a25767361944eeb184e65813a90390e6355beb15bb2c9276c7719073d67a1d5519633f7befac1a919ce469bda25a") r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:34:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) [ 476.890983][T25137] QAT: failed to copy from user cfg_data. 03:34:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) [ 476.996093][T25141] QAT: Invalid ioctl [ 477.083037][T25148] QAT: failed to copy from user cfg_data. [ 477.234156][T25259] QAT: failed to copy from user cfg_data. 03:34:50 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, 0x0, 0x0, 0x0, &(0x7f0000008bc0)) 03:34:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0xc0206434, 0x0) 03:34:50 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:50 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x30200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x44000, 0x0) getuid() r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) getresuid(&(0x7f0000000540), &(0x7f0000000580)=0x0, &(0x7f00000005c0)) keyctl$get_persistent(0x16, r2, r1) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000140)={"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"}) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000600)) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000640)=@sack_info={0x0, 0x2, 0xd5}, &(0x7f0000000680)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000006c0)={r3, 0x5, 0x6}, &(0x7f0000000700)=0x8) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x40096101, 0x0) ioctl$TIOCLINUX4(r4, 0x541c, &(0x7f0000000000)) 03:34:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) 03:34:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0b") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) 03:34:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0xc020660b, 0x0) [ 477.457885][T25268] QAT: failed to copy from user cfg_data. [ 477.483023][T25274] QAT: Invalid ioctl 03:34:50 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) 03:34:50 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x101000, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f00000000c0)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000140)={0x3, 'ifb0\x00', 0x1}, 0x18) ioctl(r0, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='changehat 0x0000000000000003^/dev/qat_a$f_ctl\x00!-]\x00/dev/qat_adf_ctl\x00ethqem1\x00/dev/qat_adf_ctl\x00'], 0x5c) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x40096101, 0x0) fcntl$addseals(r2, 0x409, 0x1) [ 477.628259][T25390] QAT: failed to copy from user cfg_data. 03:34:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) [ 477.714436][T25398] QAT: failed to copy from user cfg_data. [ 477.826577][T25405] QAT: failed to copy from user cfg_data. [ 477.890988][T25414] QAT: failed to copy from user cfg_data. 03:34:51 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00), 0x0, 0x0, &(0x7f0000008bc0)) 03:34:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e1398416f1a}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000002d80)='/dev/vfio/vfio\x00', 0x101000, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000002e00)={@empty, @multicast1}, &(0x7f0000002e40)=0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0xfffffffffffffffd, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x402, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="610000008e799573b9f75fb0b3bdf7af6f65d6f9576482ba110d0a127a54bc11aae2055c12fe308c3953643e8acd6a69a4547910a7fb2aae6047df00000100000000001392c1f25ddfeabf99c10a275316ed0cba00cf531c2f7b9bdddc20bd2170f930"], &(0x7f00000003c0)=0x69) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000002ec0)={r5, 0x9}, &(0x7f0000002e80)) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000002f00)={r5, @in6={{0xa, 0x4e24, 0x5, @rand_addr="8c10fd0d799d5323c60f173c7e37470a", 0x8}}, 0x2, 0x200}, 0x90) r6 = fcntl$getown(r0, 0x9) process_vm_writev(r6, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/135, 0x87}, {&(0x7f0000000280)=""/109, 0x6d}, {&(0x7f0000002c80)=""/232, 0xe8}, {&(0x7f0000000140)=""/50, 0x32}, {&(0x7f0000000400)=""/137, 0x89}, {&(0x7f00000004c0)=""/121, 0x79}], 0x6, &(0x7f0000002bc0)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/182, 0xb6}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/201, 0xc9}, {&(0x7f0000002780)=""/235, 0xeb}, {&(0x7f0000002880)=""/117, 0x75}, {&(0x7f0000002900)=""/26, 0x1a}, {&(0x7f0000002940)=""/146, 0x92}, {&(0x7f0000002a00)=""/193, 0xc1}, {&(0x7f0000002b00)=""/149, 0x95}], 0xa, 0x0) 03:34:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0xc020aa00, 0x0) 03:34:51 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:51 executing program 3: ioctl(0xffffffffffffffff, 0xfffffffffffffffc, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x82000, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) clone(0x10100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f00000001c0), &(0x7f0000000200)=0x4) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100)={0x1, 0x7}, 0x2) rmdir(&(0x7f0000000000)='./file1\x00') openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) 03:34:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7b") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) 03:34:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) [ 478.355347][T25526] QAT: failed to copy from user cfg_data. [ 478.423940][T25528] QAT: Invalid ioctl 03:34:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) 03:34:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0xc028aa03, 0x0) [ 478.496488][T25562] QAT: failed to copy from user cfg_data. 03:34:51 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x5) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be0") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) [ 478.596429][T25653] QAT: failed to copy from user cfg_data. 03:34:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x0, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x70, 0x6, 0x6, 0x974, 0x3, 0x0, 0x2, 0xe, 0x6, 0xffffffff, 0x20, 0x8, 0x2, 0x4, 0xba, 0x3ff, 0x13a, 0x3e68, 0x5, 0x1, 0xca, 0xa3, 0x214, 0x5, 0x3, 0x5, 0x9, 0x2, 0x1000, 0xa0df, 0x8, 0x3, 0x3e26, 0x81, 0x12c, 0x1000, 0x4c, 0x0, 0x4, 0x3, @perf_config_ext={0x7, 0x7f}, 0x2040, 0x10001, 0x1, 0x7, 0x7fffffff, 0x9, 0x33}, 0xffffffffffffffff, 0xc, 0xffffffffffffff9c, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x70, 0x2, 0x8, 0xc790, 0x7, 0x0, 0x7, 0x800, 0x1, 0x5, 0x5, 0x6, 0x2, 0x9, 0x7, 0x800, 0x0, 0x3, 0xedc, 0x8, 0xfffffffeffffffff, 0x8, 0xa7, 0x3, 0x1, 0x2, 0x2, 0x4010, 0x81, 0x8, 0x8, 0x8001, 0x5, 0xfffffffffffff801, 0x2, 0x80000001, 0x7, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000140), 0x6}, 0x2420, 0x2, 0x4, 0x8, 0x8, 0x100, 0x1fc}, r3, 0x8, r4, 0xc) [ 478.748457][T25659] QAT: Invalid ioctl [ 478.795990][T25670] QAT: failed to copy from user cfg_data. [ 478.812944][T25675] QAT: Invalid ioctl 03:34:52 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00), 0x0, 0x0, &(0x7f0000008bc0)) 03:34:52 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)={0x2, 0x7, 0x4, 0x4404452, {}, {0x4, 0xf, 0x80000001, 0x3f, 0xffffffff, 0xac, "ca117c1b"}, 0x2, 0x2, @planes=&(0x7f0000000000)={0x7, 0x4, @userptr=0x401, 0x4}, 0x4}) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:34:52 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) 03:34:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0xc02c563a, 0x0) 03:34:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000540)={0x0, &(0x7f0000000580)}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000001c0)=""/188, &(0x7f0000000140)=0xbc) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200600}) sysfs$3(0x3) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000003c0)={0x0, 0x8, 0x30, 0x9, 0x5}, &(0x7f0000000400)=0x18) syz_open_dev$mice(&(0x7f0000002b00)='/dev/input/mice\x00', 0x0, 0xc100) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000440)={r3, @in={{0x2, 0x4e22, @broadcast}}, 0x80000000, 0x8, 0x3, 0x1f, 0x24}, 0x98) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x2, 0x0) ioctl$ASHMEM_GET_NAME(r4, 0x81007702, &(0x7f0000000780)=""/251) r5 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f00000002c0)={0x1ff}) sendmmsg$alg(r4, &(0x7f0000002bc0)=[{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000580)="12abee3de477ad1c963ed4886c1787425188730dea5cf5c22e69070a759b9ca984a53d41a1c9042d9d09f568fde728213ac7a7d6a927dddc1f3f2717700597a17347a941d9de267a4b26fc9d26b9981b904f50dbfc59c600ddc3d08f1f466fb1ffae1c3e7ee3a3f080982d0f47f55f8a94906a2045eef796ca1f3bf6dd885170f27e9fcc15", 0x85}, {&(0x7f0000000500)="24578ef9f84d3376043fd49eb3e5cf780a40b58783879e969abb38940e", 0x1d}, {&(0x7f0000000640)="7cd24fa1b5e0cc10c54dfed50df4150c8516a698c0c23833b114a9d3b3f6416e2e3a5c8ea07b1a0eb5ee8a1e1bf04b849ec25c1cb05feb01496cee710d5b99de6c78021bb8d330e40f2a2d529abb2d690c2b21f52ab5083fc7e103f51eb1bc064cdef327cf4e432e14d31e2f5751d3abede2e77ea896c1e5845335f8fede053fd9ef35085a62bc27de6e", 0x8a}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="1f96df36512fe1e96b7409a8b2054bf6fc4a14bdb3b8a5649b6e9ccb2aa386898addc0a8cf649fc6545e3899c602eee397a309e26186af045a1c3a94ab5d564b6fd996f5ba4280ffbf3590dfe76d2908086d5fd3cfcdee9520b77da0ee3ac7d79c4fdd4e53aef50b999720f875e77855eea98e95a8d9f99b67f6d8c42d8988740260e1a073766993a6e66563282307370bacc4f0339bd5a6b1838c2e530cdc694aa2fef7f80b18ad7c74594692398ea16b5368bc4a54b081408ac7ef124423dd1f6276c70de02f10f36097b2f09a959590e84c81f811f6e8c60bfc934a348bae503a", 0xe2}, {&(0x7f0000000700)="76227d9cfa3db0c5a07456b6c335b1e27053a716728287728717d36bb6781a2b5821d11e427eb79b519374b9fc5cc135423ee1500263e1eb50afb324c7699e5e23a9ebee5051ff77debf20c8e9", 0x4d}, {&(0x7f0000001980)="010d9f467a5943fbe63429629fe6725f98440d48d4d433883d49844fea300982aa5504548c86e24c5e60cbc48e24ade6f52a80d9c61a2f93f78ff4f08d7989a56c22122d1230a4859d6c010cae159774c405c85ea92cc83186f3541e144bd33a5059a87a1e932d6f10b69b0db2856412dba8122f30a0279ac6f557655146896f29ae87def70d1722fb19df39aa3c0afbf6cbdee6b1cb0cd5e785f2b3373f673360c576d2f31b8dc6f80cef6f36ce534287835c672955fcc90e97cb3fbcc5b536460e8f94c24fa735da8fe0c7f6ee7dc3cc4a2c6814231eebabd70f55f22a", 0xde}, {&(0x7f0000001a80)="950936381eae7fb8ce4f0109e909730cc772cc260f331d759444fc8e0d2110dc679d57ec5e382359d35f00fd85fa0a67950b5b5f11c0968a4f4b690bf8c5063735b7c64bd0b4bc5520691a2e2182386394c1795d3538e797545d16d94cd7668b59c5ee769145d319801ad1b03548ee4532777166abf6a6738004a41690771d24c85fe4993ed82588d1622db4090515bb4f18de0bfd7a9a9819be086d8554320171c8caacd08f62619e92a743a099386534481ffef082fe9a510889c83fe5e4f59132d4bf76f8965e5b875294d8b2dd9df46c5c375644b1cd2f189b332602ef", 0xdf}, {&(0x7f0000001b80)="e0f358a909a678e26d3eb3bdc04ef48a04ee08e1e1c37bfb3430b339d1744e8bb62f0436630f89f671cbb9370358ef8969ceea0f", 0x34}], 0x9, &(0x7f0000001c80)=[@iv={0x68, 0x117, 0x2, 0x4d, "8be11a6af48e7ec9b95967a823e47f7e715a98335a0398959c23d997af892336af686a5d0fac7edde78447ad5dba02e226241d270953fa45036b064fcad96577ef57c47645e4c4dc3f2188964a"}, @assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x59}, @assoc={0x18, 0x117, 0x4, 0x8}, @iv={0x60, 0x117, 0x2, 0x49, "fce479f1caa9a7ddda9de3a48a88f00f61311134b9cdc6156e0d214d5ebe8cb06bc0a4a564ed49d9fa64de4c2c1a6c4a5d814b8ee5dc6486f1558e1f20cc46065b77615b4fa275206b"}, @iv={0xd0, 0x117, 0x2, 0xb6, "9e5fb4aae9bdf0dc0187a87e8ab27a9b9d68130336466e8aef64c55468683dca209839dd972a5d65801bf26ffffddd33b3c723e76fd6d28211052adcfaa2b5a5713bae2f9d53353d813cda1ee8013c2eb033ed98c9cec27c855cb0075503bc9506a1cd689ec65cb7d4c68368ff7363a14433a8a1a6c2eec6e73cd1fe6878778011b37234b58977c1a2fcd32f1fbcb3ad2c044e03b3303f8b19f38224d59fcbe34e8163648be9110ad30f5c961ddb470732a1898662ad"}], 0x1e0, 0x4004000}, {0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001e80)="8965277cdf0840d8038a3f322c2606ee9c508e274419f75c046e891c35d8284f6fe0f6f0442d3902da9dd5e12e577ab7990481f8a32270c1202aaf7e070b273f5569bb8b38d2", 0x46}], 0x1, &(0x7f0000001f40)=[@iv={0x100, 0x117, 0x2, 0xe8, "a06f407447167cd87249a28a1bd9ac3050ede02fa5a37ece534f247a876aff5e6e2670ab5075cb3a4e60f50a350f7d540d91a420d34d00881bb7f5d0729403c52e032b7de4571fa3c1d028f4b479d2387a7053d10763108a8c352bf9d2c90e7e376d9ff0bc0890e697d3a750107dd02ae0e1e0a15502f4f69531c7dccfc81e957a63ada8334a85e7834040a6c5d85fe2b9152e7f666407a6f33c9a0e76283b977134d7186e2f9ccd591967dbc42d7705ba025ac5798d3abde0664564d098513112811572f5f1d0848b8b861dc087d1ed90e729e814c06eb63098143c607074d9e60f3d9f3fc6a46d"}, @iv={0x108, 0x117, 0x2, 0xf1, "1641fb266c2ca87cfa3043ff906feb39b0382a4f42b9500f935c6ab2b870b2c4b370ae2324858314cbfd3725de0a847d5c58e2ef1b3e713b3eed3253ea8ff7f48967d143f9c24c739dc6bcbf28bc9aefdae69a956faa9cb1c5ed1a535b007d124473e8b46f618cb9cadd98010961b2ac297b5cf85debf40cf13a1a6747d1fbbf1a5e981e76e67538bf89f5e62811f538276c02edcf27be15946878e963cc68b4d8e2faa519372f081ee3e17a223ab87ec1e29ff648e3f644dfb253fcd075b5b81f6b272f909a2ecadeba3c983a94b6d13ca1489676781da39ff9222ee080cf2d2da1a297b9aa8a0227256826850e024d29"}, @assoc={0x18, 0x117, 0x4, 0xa8}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}, @iv={0xa8, 0x117, 0x2, 0x94, "4978b1f28c20a22b30564733c4269e92434773afae9cbac9623d3f1fae28d28c4735f49798f983e692c0b08ac73db0e1504a8c72b01b8b5f6af701e182cae1fe25f366c1aa1fe3229817c9f9cf263db372513d030ca147b4634b2c5b0f0596189d7bd2db062ea9a58c2ee844198abdd055dfa20000e059707452043cc803288d484acb23b295b8e9ba96f67547855ef68c9c5720"}, @op={0x18}, @iv={0x20, 0x117, 0x2, 0x6, "ff6e37e957fb"}, @op={0x18}], 0x348, 0x20000000}, {0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000022c0)="6ce6bfd41c63adec7603853cf362ad323bb5d870b937c84b43c3de8806a0af8be979a567fd391e", 0x27}, {&(0x7f0000002300)="222f0e3b06e2b97172775859bef8a1ed18c31247acfcf6c037111c57323571ab50a9c64fa812017a757006d9c2fbbaf50ab85e817f9a566b7a067d50ca60bbbd6f844abe22f8f29da34c", 0x4a}, {&(0x7f0000002380)="293bd677aac983a4ef477a049fc94a668d8ac908711e47ce4a4e0f9e7137737486718a4290020b3e41f23ebae43431050071c45157c008df3b", 0x39}, {&(0x7f00000023c0)="df1acd38344fa1d7244e84dc943954d9d1ed8b653770e161163ef29bb5c8aee156d9f36dfd3806377bf8d06095aaf343cbba860a10e4e8a378b18b7fdd18c957b9d910f5e646f47deccf77e0e608cd5901971292cc0335c400812c06ad0f20552160d52e8a85770ce6eea08c288f3412c365c5280266aa0ab084c5bb0e2408ef8cdc36f9a77bcd733325466373e4a6419a356dee27718a50e52cc71f8ef69cd96f4125761617ecce8a", 0xa9}, {&(0x7f0000002480)="8bb2f8c259674bb8744fb6c67f6e17a0ea", 0x11}, {&(0x7f00000024c0)="1534472f849c54f8043a1cfac44188141c6ae841324b6ab7f779f6b04692de34ae29cb718cf6b04f17736b70e9de060049b4ccc961ea36ab290126396f248788339527bd26a39cf4a79ef4cd05d95d8ff053ca7cd4ee190315636d330566c69b0ec685235fbb567421c6c9b9d966a9fe2be34ba3898997702f7dd9522a76a81837317b302af40781ba41ab5aa61acb3ba9f7dc1c972dfb57c8182b87e57d216ad4d37218c175a9c2f3e9c646906ae07634c461d60fe4f6eb5fea2b6890511d7d5d8f8878bebb4f64a1a6f90c406c1a958ce3fdbf2efcab03fb3924b49a5d3ba1a2671457d090718f6ba765ee8b74b670f5d3ef11ec1a9c28c1ed0f77", 0xfc}, {&(0x7f00000025c0)="697b902f97fb372e3fcc1f1ea28a6466edfa4f53ce16cfbf84063f41feb435b4ff6c7528e1e31f642ec93e25f2a706c9ef50055c01e338465a15661c7d72635377072276c78457f4ee0aaa80c08fda9f8d0584608878e313203f66c1ecbfa37daad5938cf3b8aa65c3cc98085d7a7f6a6664592d12ad29c3c89269951408e8051a369f57d11513cb2873", 0x8a}, {&(0x7f0000002680)="4569318c4d68377ca2ee455e42c321e625f3c3ab55772f116c3805", 0x1b}, {&(0x7f00000026c0)="f5bfc13957f2585f39aa89a2d7bf00e6857c0e3e4b364f28325e0e151b71e42f4ac0128395e837e39a995da75ec8152c26d7250ac4d46e9cd9e305237998d273190bbd68b63d39b4f9e15a0655", 0x4d}], 0x9, &(0x7f0000002800)=[@iv={0x118, 0x117, 0x2, 0xfd, "accad7d0ca01799763278317617a380781524ece41b931fda542dec391db2cc69253f2c93048fb49e342f2a94ca2b4e35b774e34da6450526d704a5a915eb4e943df3831767b7219d007d1bc5a77a7306a26acde52dbeb173a1d745d214b6b8115d6b4c14db3e524cddb175b5b60852e48b89914bed5bf3f22625d3dc3494eef59b3198f2fcab9085e78da3bfdd97ef20fe94ecf0269b9bc4bbff5299a742b40ccf1652274255e1f3fe2edfd369127c08383b4fe1ff403ff853b1a831381fb2688d566b9dd839865df17f986c99f5ee3b73c771a9accbbe8a6864beebe827537bb9bcc1ab214c48d6428190ac187ccf2f1456dcb4ab97011007b42b0fe"}, @assoc={0x18, 0x117, 0x4, 0x4}, @iv={0xc0, 0x117, 0x2, 0xab, "cdbb5603c8495cd8de3d7dde23ff9c32a1105e8d4f866d43ca0a8a24feb0dd56b977ed4d0ae384bd9e1b99e127e0d6c6ef77f7f5e73e2cce013d111ffc19b6493134e0c4fddbf1bf7fe9299fb4d40c2088688cb6f9c8beccd2c4e8bad3a23d0de9d723457ae9947bc4d5d0e803d003141bc9b4e351e2579c5914bbe247250f3c9fb8dea4502c9b63b5f054b949041feb31aef24fb88e40587b4be24586f07146caee10b03ac99faa5b0305"}, @assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x38, 0x117, 0x2, 0x23, "51cb3d2d58488b13acae654908b38b71fb7b91ee39bfe6ef31c228a7a9621bdda847e8"}, @iv={0x30, 0x117, 0x2, 0x17, "716ce1cfb4cefa86aad9c7df6848e935522eb6b2d3c36a"}, @op={0x18}], 0x2a0, 0x8000}, {0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002ac0)="a816202190a6bebd39e0d12aeb4955565e2ec3c82fe154ec7cc8157227ce91af267afe34b6", 0x25}, {&(0x7f0000002b00)}], 0x2, &(0x7f0000002b80)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18, 0x4000}], 0x4, 0x20000880) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000100)) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2) [ 479.307222][T25685] QAT: Invalid ioctl [ 479.319486][T25690] IPVS: length: 188 != 24 [ 479.339711][T25685] QAT: failed to copy from user cfg_data. 03:34:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0xc0306201, 0x0) [ 479.359230][T25691] QAT: failed to copy from user cfg_data. 03:34:52 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) 03:34:52 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0xc0485630, 0x0) [ 479.472386][T25798] IPVS: length: 188 != 24 03:34:52 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x4, 0x1000, [], 0x8, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000140)=""/4096}, &(0x7f0000001140)=0x78) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:34:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) [ 479.571964][T25816] QAT: failed to copy from user cfg_data. [ 479.664537][T25827] QAT: failed to copy from user cfg_data. [ 479.698999][T25829] QAT: Invalid ioctl 03:34:53 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00), 0x0, 0x0, &(0x7f0000008bc0)) 03:34:53 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0xb) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) 03:34:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0xc0605345, 0x0) 03:34:53 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0xffff, 0x4) 03:34:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x410800, 0x0) ioctl$TCXONC(r2, 0x540a, 0x5) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x3) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) [ 480.191187][T25951] QAT: failed to copy from user cfg_data. [ 480.216185][T25953] QAT: Invalid ioctl 03:34:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={r2, 0xff, 0x1, [0xffffffff]}, 0xa) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x5) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x40096101, 0x0) 03:34:53 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 480.248133][T25956] QAT: failed to copy from user cfg_data. [ 480.255485][T25979] QAT: Invalid ioctl 03:34:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) 03:34:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)=0x8) ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:34:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x200, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000001c0)=""/154) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000140)={'gretap0\x00', 0x40d}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0xaa09800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x2) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) r2 = semget(0x0, 0x5, 0x44) semctl$SETVAL(r2, 0x0, 0x10, &(0x7f0000000080)=0x6) timerfd_create(0x6, 0x0) [ 480.495887][T26079] QAT: failed to copy from user cfg_data. [ 480.685862][T26173] QAT: failed to copy from user cfg_data. [ 480.726703][T26173] QAT: failed to copy from user cfg_data. 03:34:54 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) 03:34:54 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x223) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:54 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) fgetxattr(r0, &(0x7f0000000040)=@known='com.apple.system.Security\x00', &(0x7f0000000080)=""/171, 0xab) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000140), &(0x7f0000000180)=0x30) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x40096101, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000001c0)={0x8, 0x101, 0x7, {0xf8, 0x47, 0x8, 0xf2}}) 03:34:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0xfffff7ffffbffffc, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000240)={0xffffffffffffffe0, 0xff, r2, 0x0, r3, 0x0, 0x6, 0x4}) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000140)=ANY=[@ANYBLOB="71000000df60ee95b288463bf359e64e256ae19ae7d77cfacfe5b6a6b0b3e74689bbe451eab29dbc84884bf86b0d92bae7ebf6581fb6e02397730b1de91c0817bddaac1e522f1db1ced97e0405e2aee62246dd87a3cdc91ec54dfa00048e2cecc76d7280bea46eccb0cc15800e81236ed158ca211f"]) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000080), 0x4) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) 03:34:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) [ 481.159062][T26214] QAT: Invalid ioctl 03:34:54 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl(r0, 0xfffffffffffffff8, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000000)={0x401, "630d2939d689dc3e17b3b198edd1a4c92170fc9760588b7694ea96b9827a1034", 0x100, 0x3ff, 0x9, 0x8, 0x3}) 03:34:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x40096100, 0x0) 03:34:54 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000480)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e23, @empty}, {0x2, 0x4e21, @rand_addr=0x100}, 0x40, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)='bridge_slave_0\x00', 0x5, 0x40, 0xce4}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0xa}, &(0x7f0000000100)=0x221) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000003c0)={r2, 0x81, "6b67bd709db086867178b90921843ea300b7d617005d6f53e527157bb0be8e0ae3d95845d3b8d1ec5dbf031509d778a03c359f6c924a5010b10412dbcb7e97f6a6fe102403db01b98fc0472b1e40dd84c6b6e1f2b5c3e5ee876fb2c87a0358f42b2dd6e1c07db5bc2f4a1ddecbd6e61130867f824862ac6309a58173160d30515e"}, &(0x7f0000000280)=0x89) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r3, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 481.204548][T26324] QAT: failed to copy from user cfg_data. [ 481.230744][T26214] QAT: Invalid ioctl [ 481.295040][T26333] QAT: Invalid ioctl 03:34:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioperm(0x5, 0xfffffffffffffff8, 0x4) r3 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x2, 0x100) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f00000004c0)={0x6, 0x10001}, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000440)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r4}}, 0x18) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000000480)=[0x4, 0x1], 0x2) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}}}, &(0x7f0000000680)=0xe8) r6 = getuid() getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000700)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000800)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@ipv4={[], [], @initdev}, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000940)=0xe8) getresuid(&(0x7f0000000980)=0x0, &(0x7f00000009c0), &(0x7f0000000a00)) stat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000b00)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f0000000c00)=0xe8) stat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getgid() getgroups(0x2, &(0x7f0000000dc0)=[0xee01, 0xee00]) fstat(r0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = getgid() fstat(r1, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000f00)={{}, {0x1, 0x6}, [{0x2, 0x0, r5}, {0x2, 0x4, r6}, {0x2, 0x7, r7}, {0x2, 0x2, r8}, {0x2, 0x6, r9}, {0x2, 0x4, r10}, {0x2, 0x7, r11}, {0x2, 0x2, r12}], {0x4, 0x7}, [{0x8, 0x1, r13}, {0x8, 0x1, r14}, {0x8, 0x0, r15}, {0x8, 0x2, r16}, {0x8, 0x1, r17}, {0x8, 0x6, r18}], {0x10, 0x1}, {0x20, 0x4}}, 0x94, 0x2) [ 481.331237][T26334] QAT: Invalid ioctl 03:34:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000080)=0x200, 0x4) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f00000000c0)) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x20000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x4000000000084800, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x40096101, 0x0) [ 481.359254][T26334] QAT: failed to copy from user cfg_data. [ 481.376738][T26334] QAT: Invalid ioctl 03:34:55 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:55 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) recvfrom$ax25(r1, &(0x7f00000003c0)=""/80, 0x50, 0x0, &(0x7f0000000440)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x40096100, 0x0) 03:34:55 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x20400) ioctl(r0, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000008c0)=ANY=[@ANYBLOB="020300030c000000000000030000000002000900400000f76f1a4e0000000000030006000000000b0000000000000054d81458186fe8b900020001604fce00000000000000020200044a7b030000000200000060003f010000000000fca0d900000000fc5388594d1e0e438a4cbc0cc3d4c28c1c3ff7c1b652db84d50222e556099d271f07e3edb35650634c419b1131df77c2fb2eec5d110507c8493278f606c3ad6cba420488ef439606d67eefa417753fbf7cc78b8609a14dad2113e023f0a552c6e025310817b8cefcdc9e3eae186da757660a6e7bea98229ca3f157"], 0x60}}, 0x0) exit(0x0) fcntl$getflags(r1, 0x3) getsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in=@dev, @in=@multicast2}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, 0x0) r3 = creat(0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req={0xe1fe, 0x200, 0x100000001, 0x3ff}, 0x10) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f00000001c0)={{0x62b6, 0x3}, 'port1\x00', 0x48, 0x80002, 0x54, 0x6, 0x1f, 0xdad, 0x8, 0x0, 0x4, 0x6}) prctl$PR_GET_TSC(0x19, 0x0) sync_file_range(0xffffffffffffffff, 0x8000000020222, 0x0, 0x0) io_setup(0x8, &(0x7f0000000280)) io_setup(0x1, &(0x7f00000002c0)) io_setup(0xc2, &(0x7f0000000300)) io_setup(0x460, &(0x7f0000000340)) io_setup(0x80000000, &(0x7f00000003c0)) io_setup(0x3, &(0x7f0000000880)) io_setup(0x8000000009, &(0x7f00000000c0)) io_setup(0x9, &(0x7f00000005c0)) io_setup(0xc96, &(0x7f0000000600)) io_setup(0x3ff, &(0x7f0000000640)) io_setup(0x3d, &(0x7f00000006c0)=0x0) io_destroy(r4) syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000080)={0x100000000, 0x0, 0x80}) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, 0x1, 0x7fff, 0x8}, 0xa) 03:34:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0xa00, 0x0) 03:34:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/net/tun\x00', 0x20000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) pipe2(&(0x7f0000000140), 0x800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0xfffffffffffffffc, 0x0) r3 = add_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="bb4be09228bb3a290aa0e9aee340c61415dcb72f9ca8143832655ca95a0ba8fb77e7cbfa58022021630d18af64c8e5b78b67bdb1fb3bcd3d8508a364f61922986afeff4434b8cd17b78b080d55567c640fcd1035c8c41658a37e9fb1d0712255be847cb8e00a08624c20b2b19011f02fdfe6c1c5c5ff3f2fb85718a1d9cca102e9d71b3c456ce493dd724b707b2a66538411ff52b0a1f27379a9edc18b7a9807ac", 0xa1, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000300)={r3, 0x1000, 0x30}, 0x0, &(0x7f0000000340)="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", &(0x7f0000001340)="43cbed859f9222e54ac184533e89156d44da627937f5c1ddfcad701d188f6408114aaac201ba701ce6f2a9cf4e9b59c4") ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x40096100, 0x0) [ 481.980221][T26464] QAT: Invalid ioctl 03:34:55 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) fsync(r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x192) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000300)) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000340)={r4, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000003c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000440)="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", 0xfc}, {&(0x7f0000000540)="aa5bcba12c46a97b18319a6d5193ce0440bb0849efee572cd42074dd2894ba39e724bd9d4a8a9af356181ef4301dadf298c3354443ebc7246ef74ee7a2a1eab727045cdac171035a3dfde140114290c170c2dd62ebd85f0cf31d7dc86e5acb0b53ab1414ffdd50934f61f8fc6b61c1d4eb114aed2268ff1e8ff2fbd15483d5f1b50ba0bed38119f985a4075d345ae84600b54b6f1f55a1c377db0237f93723a318a987eae5f969ce6d4fc925dc5e99afc4dbf77ab913409c043d6290b8c5d214aaa3146816c891672da88e2e3f0110038f1f850377450952506c8a0958e3922f92ca9d8022cbb235", 0xe8}], 0x2}, 0x90) ioctl$TCSBRKP(r2, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 482.013156][T26467] QAT: failed to copy from user cfg_data. 03:34:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x251, 0x8080) r2 = getuid() getresgid(&(0x7f00000000c0), &(0x7f0000000140)=0x0, &(0x7f0000000180)) write$P9_RGETATTR(r1, &(0x7f00000001c0)={0xa0, 0x19, 0x2, {0x8, {0x0, 0x0, 0x6}, 0x40, r2, r3, 0x2, 0x6, 0x2, 0x8000, 0x0, 0x2, 0x5cfa, 0xfffffffffffff801, 0x7, 0x40, 0x2, 0x7, 0x87c, 0x0, 0xe5a0}}, 0xa0) ioctl(r0, 0x8000001000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400, 0x0) r5 = msgget(0x0, 0x70) msgrcv(r5, &(0x7f0000000280)={0x0, ""/10}, 0x12, 0x3, 0x800) ioctl$TIOCSSOFTCAR(r4, 0x40096101, 0x0) 03:34:55 executing program 4: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'hwsim0\x00\x00\x00\x00\x00x\x9f\xf9\xe1\x00', 0x4b732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x44) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f00000001c0)={0x8001, 0x5, 0x5, 0x5, 0x7, 0x6}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x6, 0x80) 03:34:55 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x2) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 482.432037][T26606] QAT: failed to copy from user cfg_data. 03:34:55 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:55 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000000)=0x81) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'U-'}, 0x28, 0x3) getsockopt$bt_hci(r0, 0x0, 0x0, &(0x7f0000000000)=""/36, &(0x7f0000000080)=0x24) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x7fff) write$P9_RMKNOD(r1, &(0x7f0000000140)={0x14, 0x13, 0x2, {0x6, 0x4, 0x8}}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x1}) 03:34:55 executing program 4: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) fsync(r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x192) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000300)) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000340)={r4, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000003c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000440)="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", 0xfc}, {&(0x7f0000000540)="aa5bcba12c46a97b18319a6d5193ce0440bb0849efee572cd42074dd2894ba39e724bd9d4a8a9af356181ef4301dadf298c3354443ebc7246ef74ee7a2a1eab727045cdac171035a3dfde140114290c170c2dd62ebd85f0cf31d7dc86e5acb0b53ab1414ffdd50934f61f8fc6b61c1d4eb114aed2268ff1e8ff2fbd15483d5f1b50ba0bed38119f985a4075d345ae84600b54b6f1f55a1c377db0237f93723a318a987eae5f969ce6d4fc925dc5e99afc4dbf77ab913409c043d6290b8c5d214aaa3146816c891672da88e2e3f0110038f1f850377450952506c8a0958e3922f92ca9d8022cbb235", 0xe8}], 0x2}, 0x90) ioctl$TCSBRKP(r2, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:55 executing program 3: socket$key(0xf, 0x3, 0x2) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8, 0x101840) socket$nl_crypto(0x10, 0x3, 0x15) openat$hwrng(0xffffffffffffff9c, &(0x7f0000008e00)='/dev/hwrng\x00', 0x400, 0x0) r0 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl(r0, 0x6, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:34:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x22000, 0x0) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000200)={0xb64, 0x81, 0x0, 0x0, 0x6, 0x200}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) [ 482.871315][T26629] QAT: failed to copy from user cfg_data. 03:34:56 executing program 4: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) fsync(r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x192) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000300)) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000340)={r4, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000003c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000440)="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", 0xfc}, {&(0x7f0000000540)="aa5bcba12c46a97b18319a6d5193ce0440bb0849efee572cd42074dd2894ba39e724bd9d4a8a9af356181ef4301dadf298c3354443ebc7246ef74ee7a2a1eab727045cdac171035a3dfde140114290c170c2dd62ebd85f0cf31d7dc86e5acb0b53ab1414ffdd50934f61f8fc6b61c1d4eb114aed2268ff1e8ff2fbd15483d5f1b50ba0bed38119f985a4075d345ae84600b54b6f1f55a1c377db0237f93723a318a987eae5f969ce6d4fc925dc5e99afc4dbf77ab913409c043d6290b8c5d214aaa3146816c891672da88e2e3f0110038f1f850377450952506c8a0958e3922f92ca9d8022cbb235", 0xe8}], 0x2}, 0x90) ioctl$TCSBRKP(r2, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 482.942915][T26636] QAT: failed to copy from user cfg_data. 03:34:56 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) socket$rds(0x15, 0x5, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 482.995024][T26636] QAT: Invalid ioctl 03:34:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000140)="b3d87fe7e91db9d9d81ee1b8cd7fbf0e99e40a8dd8c7a0fae9e21edec0f946654e3dabf7cb05927f07e9674e1a67c817b7395cd56834cf352ad9ef69d0f0bb306d58890c3bddca647904241b085914267a7a8449924de754f046898aafea78f1b339fad3e28161eebce8cc56aa2c6baa01b5020adfce31916b2e40bc36ab1f312afc2cf3c69ed2879928f1e98d7eabe3e808ef26b2af962be4c923901ad9dc8d7c95ea322804725dfb42eaea0cec5b61e23cdcfecee8c9bd124f559b42070141a081e48ef41ce779a1ed18612341506a74ec44481a17cd367cab5c20b9be3070730341e84ec2312b4213670a3727928b43f8e6421a9c", 0xf6, 0x4044095, 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) [ 483.038038][T26636] QAT: Invalid ioctl 03:34:56 executing program 4: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) fsync(r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x192) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000300)) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000340)={r4, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000003c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000440)="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", 0xfc}, {&(0x7f0000000540)="aa5bcba12c46a97b18319a6d5193ce0440bb0849efee572cd42074dd2894ba39e724bd9d4a8a9af356181ef4301dadf298c3354443ebc7246ef74ee7a2a1eab727045cdac171035a3dfde140114290c170c2dd62ebd85f0cf31d7dc86e5acb0b53ab1414ffdd50934f61f8fc6b61c1d4eb114aed2268ff1e8ff2fbd15483d5f1b50ba0bed38119f985a4075d345ae84600b54b6f1f55a1c377db0237f93723a318a987eae5f969ce6d4fc925dc5e99afc4dbf77ab913409c043d6290b8c5d214aaa3146816c891672da88e2e3f0110038f1f850377450952506c8a0958e3922f92ca9d8022cbb235", 0xe8}], 0x2}, 0x90) ioctl$TCSBRKP(r2, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:56 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8b, 0x4080) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x2, 0x2, 0x101, 0x3, 0x4}, 0x7f, 0x528, 0x7}) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:34:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x3, &(0x7f0000000140)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f00000001c0)=r3) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'rose0\x00', 0x1fe}) [ 483.251799][T26760] QAT: failed to copy from user cfg_data. [ 483.330080][T26765] QAT: failed to copy from user cfg_data. 03:34:56 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x30}, {&(0x7f0000000680)=""/120, 0x78}], 0x2}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:56 executing program 4: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) fsync(r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x192) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000300)) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000340)={r4, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000003c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000440)="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", 0xfc}, {&(0x7f0000000540)="aa5bcba12c46a97b18319a6d5193ce0440bb0849efee572cd42074dd2894ba39e724bd9d4a8a9af356181ef4301dadf298c3354443ebc7246ef74ee7a2a1eab727045cdac171035a3dfde140114290c170c2dd62ebd85f0cf31d7dc86e5acb0b53ab1414ffdd50934f61f8fc6b61c1d4eb114aed2268ff1e8ff2fbd15483d5f1b50ba0bed38119f985a4075d345ae84600b54b6f1f55a1c377db0237f93723a318a987eae5f969ce6d4fc925dc5e99afc4dbf77ab913409c043d6290b8c5d214aaa3146816c891672da88e2e3f0110038f1f850377450952506c8a0958e3922f92ca9d8022cbb235", 0xe8}], 0x2}, 0x90) ioctl$TCSBRKP(r2, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:56 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000003c0), &(0x7f0000000100)=0x68) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000340)={r3, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r1, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) 03:34:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:34:56 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000140)) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x7, 0x6, 0x1ff, 0xffffffffffff3d0b, 0x3}, &(0x7f0000000300)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={r1, 0x4c, &(0x7f0000000340)=[@in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e23, 0x800, @dev={0xfe, 0x80, [], 0xa}, 0x2580000000000000}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e23, @rand_addr=0x6}]}, &(0x7f0000000400)=0x10) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000480)='trusted.overlay.origin\x00', &(0x7f00000004c0)='y\x00', 0x2, 0x3) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x6) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000280)={'veth1_to_team\x00', 0x1000}) r2 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffc) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000440)={0x43, 0x3, 0x1}, 0x10) keyctl$update(0x2, r2, &(0x7f00000000c0)="6a72ce432ba8c684878364d1f714afc245e57ed7434dd50d5e6f52b7dc25796723eb1e846eede6b24463edd4a2c2f59669", 0x31) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) 03:34:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'vet\x00\x10\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055a0bcffc7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) [ 483.775952][T26889] QAT: Invalid ioctl 03:34:57 executing program 4: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:57 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, r1, 0x0, 0xc, &(0x7f0000000280)='/dev/radio#\x00', 0xffffffffffffffff}, 0x30) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f0000000340)={r1, r0, 0x32a}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={r4, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = syz_open_dev$mice(&(0x7f00000012c0)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x7fffc, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000001300)={'ipddp0\x00', 0x200}) r4 = shmget(0x3, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) r5 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$EVIOCGVERSION(r5, 0x80044501, &(0x7f00000011c0)=""/224) openat$vhci(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhci\x00', 0x200800) shmctl$SHM_STAT(r4, 0xd, &(0x7f00000001c0)=""/4096) 03:34:57 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) syncfs(r0) 03:34:57 executing program 4: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 484.024767][T27009] QAT: failed to copy from user cfg_data. [ 484.167797][T27026] QAT: failed to copy from user cfg_data. 03:34:57 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x30}, {&(0x7f0000000680)=""/120, 0x78}], 0x2}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:57 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f00000003c0)=""/149) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000280)={'veth0_to_hsr\x00', {0x2, 0x4e24, @local}}) add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000340)={r3, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r1, 0x5425, 0x2) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x6, 0x38414761, 0x3, @discrete={0x9, 0x8}}) 03:34:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000080)={0x31, 0x4, 0x0, {0x3, 0x0, 0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x31) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_newroute={0x70, 0x18, 0x8, 0x70bd26, 0x25dfdbff, {0x2, 0x34, 0x80, 0x10001, 0xff, 0x1, 0xc8, 0x9, 0x200}, [@RTA_FLOW={0x8, 0xb, 0x39}, @RTA_IIF={0x8, 0x1, r2}, @RTA_ENCAP={0x18, 0x16, @typed={0x14, 0x8a, @ipv6=@mcast1}}, @RTA_PRIORITY={0x8, 0x6, 0x5}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0xdae8, 0xbd, r3}}, @RTA_SRC={0x8, 0x2, @remote}, @RTA_PREFSRC={0x8, 0x7, @empty}, @RTA_PRIORITY={0x8, 0x6, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 03:34:57 executing program 4: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:57 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x98, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xde}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 03:34:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0xf75, 0x200480) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f00000001c0)={0x2, 0x3, 0xdc9, 0x2, 0x8, 0x4}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:57 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000), 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 484.695662][T27146] QAT: failed to copy from user cfg_data. 03:34:57 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) [ 484.774065][T27151] QAT: failed to copy from user cfg_data. [ 484.845565][T27151] QAT: Invalid ioctl 03:34:58 executing program 2: r0 = add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) request_key(0x0, &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', r0) 03:34:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) accept$packet(0xffffffffffffff9c, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x5, r1, 0x22}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r4 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x40, 0x0) ioctl$RNDADDTOENTCNT(r4, 0x40045201, &(0x7f00000001c0)=0x3f) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:58 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8001, &(0x7f0000000000)=0x800, 0xff, 0x4) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) r1 = fcntl$getown(r0, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{0x9, 0x5, 0x3ff, 0x16d8, 'syz1\x00', 0x10001}, 0x1, 0x400667b0d20bcc73, 0x100, r1, 0x8, 0x0, 'syz1\x00', &(0x7f0000000040)=['\x00', '@vmnet1\x80#%vboxnet1ppp1\x00', '-posix_acl_access\x00', 'md5sumeth0proceth02$@}cgroupeth0user\x00', '/dev/qat_adf_ctl\x00', '\x00', 'keyringtrustedmime_type\x00', '^\x00'], 0x7b, [], [0xffffffffffffffff, 0x8000, 0x1, 0x7]}) fcntl$setflags(r0, 0x2, 0x1) [ 484.874468][T27219] QAT: failed to copy from user cfg_data. [ 484.896961][T27151] QAT: Invalid ioctl [ 484.912557][T27202] QAT: Invalid ioctl 03:34:58 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) [ 485.026839][T27277] QAT: failed to copy from user cfg_data. [ 485.034262][T27277] QAT: Invalid ioctl [ 485.079183][T27315] QAT: failed to copy from user cfg_data. 03:34:58 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x30}, {&(0x7f0000000680)=""/120, 0x78}], 0x2}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x1000000000000015, 0x80005, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback={0xfe80000000000000}}, 0x1c) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000380)={0x68ff, 0x4, 0x4, {}, 0x4, 0x8}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000440)=0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0x2de) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) move_mount(r2, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={r4, r5, r6}, 0xc) ioctl$TIOCSSOFTCAR(r3, 0x40096101, 0x0) ioctl$sock_ifreq(r3, 0x0, &(0x7f0000000000)={'irlan0\x00', @ifru_hwaddr=@broadcast}) 03:34:58 executing program 2: r0 = add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='id_legacy\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f00000004c0)="a97bf8378027102e4476c7c8a87ff1226b464213baa4a87e5f98b39ecce5c9cce4954551d616401ccceec06aa9d160cf58567c5e094d886cb13111a4e62f77bd0c894fca12031ce7261120af124dc2bd95d59ca39cc6d056dc796bbbf981d4c8bd23af69ec680800c552a291953aa4b9b3929cb8122a9d78c4fffbb11503d972bcb424f877338a09de1af4a58043d03f3aef6ee3a8a2466604a809b1f30f496db47b364dae93a3993eac8312241780ae2065ad1a945a530e4c7277d2ab1b9662a20d801570d15f4f76abf4652f653213c5b1a0a0db2157e5ada61528a4f07e98ed21b932a784d8fc31a512374de78e250d50eb71bf", 0xf5, r0) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1c, 0x2000000003f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0xf8f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x0) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f0000000100)=0x9) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000340)={r3, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r1, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f0000000640)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@dev, @in6=@loopback}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f00000005c0)=0x5) 03:34:58 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) 03:34:58 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1b, 0xf, 0xdb, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fdatasync(r0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) sendmsg$xdp(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x2c, 0x4, r2, 0x15}, 0x10, &(0x7f0000000240)=[{&(0x7f00000001c0)="c70bf5", 0x3}, {&(0x7f0000000200)="8b2b4149cafaf80124117aa5a3400b3f47f3fe2d2342c2cae07e80aec6ae38dc97aca40e1872ef7870ebc4cf0475711e4cd68deb7124cf26b59b", 0x3a}], 0x2, 0x0, 0x0, 0x24000000}, 0x800) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:34:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x6, 0x20000) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000001c0)) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f19}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:58 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000100)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffff8) [ 485.576987][T27397] QAT: failed to copy from user cfg_data. 03:34:58 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x40096100, 0x0) [ 485.636043][T27400] QAT: failed to copy from user cfg_data. [ 485.681419][T27406] QAT: Invalid ioctl [ 485.686878][T27406] QAT: failed to copy from user cfg_data. [ 485.704269][T27406] QAT: Invalid ioctl [ 485.749392][T27500] QAT: Invalid ioctl [ 485.763621][T27406] QAT: failed to copy from user cfg_data. 03:34:58 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2040, 0x2) ioctl$TIOCNOTTY(r0, 0x5422) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000500)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000003c0)={0x15, 0x110, 0xfa00, {r3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @remote}}}, 0x118) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) write$FUSE_POLL(r0, &(0x7f0000000300)={0x18, 0xfffffffffffffff5, 0x5, {0x7}}, 0x18) ioctl$TCSBRKP(r1, 0x5425, 0x7) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:34:58 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x4000004, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="430000000600000006000000c2f131f1611cb431dd18e4825dea0c834a5b441085bdf505636037fd6dc154990e6583994ad962ae5be0d22823e068379a7e8257a7620f7d565bd9f35dc9a63ab136722e78e1cef63f1aa522d8e664754a2b3fdba91a28e4b0b9e02537b7cce6a2c8800120be7d1fe103ea90f5e3bc6e794ad04498638b46e7495b2877f8d4fc1c841e965e15103c338fa4814dff678f5052042deaadd36cb4771c1f79cdf1c850d7a2636c7f2c3b2431a3b80776a99ad8938b6b4f5e181102b0ea72be5c2f079b5e9cd9cf2ee5e399189741d6c9805056c950288b8c"]) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:34:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x5) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) r3 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x3, 0x2) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000013c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x2c, r4, 0x824, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4008000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001500)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x1c, r5, 0x300, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001300)={0x53, 0xffffffffffffffff, 0x1000, 0x1, @scatter={0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/12, 0xc}]}, &(0x7f0000000280)="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", &(0x7f0000001280)=""/7, 0x0, 0x20, 0xffffffffffffffff, &(0x7f00000012c0)}) [ 485.801485][T27497] QAT: Invalid ioctl 03:34:58 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x40c1, 0x0) write$apparmor_current(r1, &(0x7f00000002c0)=@hat={'changehat ', 0x1, 0x5e, ['\x00', '/dev/qat_adf_ctl\x00', '/dev/qat_adf_ctl\x00', 'vboxnet1vmnet1,/\x00']}, 0x51) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x800, 0x0) ioctl(r0, 0x1000008914, &(0x7f0000000380)="11dca5055e0b0800000070") r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0x40000) read$eventfd(r2, &(0x7f0000000240), 0x8) name_to_handle_at(r2, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x36, 0x1, "e199ac2a2121a2131255f8e27d7c4d5625b9e0ca89445fa734172e02f2191ca89a1826e5f218bc53d57c1b52e7c7"}, &(0x7f0000000140), 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x40001, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000180)={0x4, {{0xa, 0x4e23, 0x6, @remote, 0xffff}}}, 0x88) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x40096101, 0x0) [ 486.075916][T27600] QAT: failed to copy from user cfg_data. [ 486.165562][T27600] QAT: failed to copy from user cfg_data. 03:34:59 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x30}, {&(0x7f0000000680)=""/120, 0x78}, {0x0}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:34:59 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x40096100, 0x0) 03:34:59 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x9, [@typedef={0xe, 0x0, 0x0, 0x8, 0x2}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x4e, 0x0, 0x21, 0x4}, @const={0x10, 0x0, 0x0, 0xa, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0xffffffffffffffff}}]}, {0x0, [0x2e, 0x30, 0x2e, 0x0, 0x7f, 0x71, 0x61]}}, &(0x7f0000000080)=""/41, 0x61, 0x29}, 0x20) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x200, 0x0) r2 = inotify_init1(0x80000) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x400202, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000, 0xffffffffffffff9c}) poll(&(0x7f0000000200)=[{r0, 0x8000}, {r1, 0x180}, {r2, 0x1}, {r3, 0x2404}, {r4, 0x662f688dcde250b8}], 0x5, 0x5) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x40096101, 0x0) 03:34:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x7, 0x56000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000200)={@empty, 0x0}, &(0x7f0000000240)=0x14) sendmsg$kcm(r2, &(0x7f0000000740)={&(0x7f0000000280)=@xdp={0x2c, 0x6, r3, 0xa}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000300)="3ad5185c32562f43535c1e53d6605fe04259bb7d679c96908c073aceb079da73327f653b992c25bf09e3408ab8cf30c49acd82b67671d919764abc8482bc7ef05f20d1e0b6b223194a765cd87f9f5079fb20be4b64c7930300e10bfa21376ce53eecabab635cfd60ba59d9b73cda3a5400471485a0aaa5374a6e6831b139ffdf5b1dee59237048057b88a1e5b6543cb3cbde0375a6514c8851eef4e47e2c96d9465837ef87cf452c0f90611f7252c4fd496f6df1e0dd02af5303c2869ed7d1196d432f7f27783ddde9a643d3dc31fb4476551868eeefc49d640f529b02053aeba0b23379d38f16", 0xe7}, {&(0x7f0000000400)="b4f80751e0619e65302d2432f934cf21484b695de771ef6bba", 0x19}, {&(0x7f0000000440)="8aa240dbb72966e58301b8cb1783e7d971960bc9b3ee8e8445ac6a557ccacedbb133d9455d815ba07d7bcc0c9cb98e96e2ea0fa999b66cb3539b8e170e26c46e8ab5d9500ba810f61b7ee9d34573db1f1282e95e74b45e", 0x57}, {&(0x7f00000004c0)="5a6532448cb1b977ea079b007eacf819fb01b95290497563b6f32e651985e61c0d778229b46286e4c8e29d483ac8b76ef5e3e3ac31abbf753ac636f3e6855c0003d92d30358b11ae8b03da41a9a2bd96127a19fedf40b29d9dd2d51390b362910d7dd9faea3574cc79c64d537f3db36b854e3c6764f9b051490a4b20e4bf057b847c372c3be42944ffb17cb8390a5b5c1159ada0667fdecf8015b1aac29306fadad4d5bf572a4112b520d9757d7f88ed18dbd97432244012aa12e3fb3004643e273d5ed2e485d0fbf91baf64df18b3f1bb475fdb1cd916e6a2cf97b24043c0d1e046db7249d981eb922b7e2938", 0xed}], 0x4, &(0x7f0000001e40)=ANY=[@ANYBLOB="d00000000000000097010000020000007add5653022f77c90b6266de08b14b950928a6419862cd443095d614be9edd4715e39ae12241457e24d54c79591f2b99613d537eb6087f46c07ee634494980ea8f2ff99a8d7bfd2e85661f05b8b8178fc7c3995e54c409eb979eb59237fe5821c12592f7c98e118f97fdfc791688fc83be257d5adca16cf7778a11eeca0862d922037aa48f6dbe3ae1f7ff8d7f1d0e8973a75fd8adff2bd9eaef01742072d05988f1dd7e876d7a33f496fbe5d0e3a2b449483570acabee5fe23524fd87904f6948c5b69d59d9951578a70000400000000000000018010000fcf30000b9eee5bf2d2c49da9340a64dc1a922340b4cb7b169190453a4efc1336b33e4350056c79f0420a55f3611000000000000"], 0x110}, 0x20000800) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000140)=""/56) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000001dc0), &(0x7f0000001e00)=0x4) writev(r0, &(0x7f0000001d00)=[{&(0x7f0000000780)="0b4e2f9312fba9427c95216b8517513aa16e2f92f640cf596b0933c3e0b27592551b8bdca530ecf7d4eb38351acbe961a01828e0adea9a88e5d898f8b6f2672543554d3a2d77152136a2ead43a9fb871d7ad67604bfd742e2458be5406b143b14078182b977ca8722f84fe3d10b5c6d03f586025dca397d4e715d95b4bb7dc2b7336a1d82a31c744ed13f26d1fd90a97", 0x90}, {&(0x7f0000000840)="10ded687d12176aa87b927688f36f87e0d35409da366f61cce472775224a49c035f5c5d85f189ecd4342afeb1125535b63cb27b6ffba1f436dafbffa9dc14b34050ec97f32a7cd57ca6ce132ebed22e58704f1bbc57616ad519027b24902654bb2018a320b1a7f330cd0cb2ae655c472e650f3670f0d1689d8878711d9a3b560128f43000d80a3d3803d6a9c21369a89def6d659834b2651929ffd8c8c79f8ea228fe673acc9b53114a864a56b4c3343a709e576571b3d32c539bb5b7578203ee2fdecf2f3778aa41a4c04aa1bd8b5b619ab60bc130b6b6ea2eee7d485f6bf9cee7811d5c79ec8e53c908f6bcf50854fde0b", 0xf2}, {&(0x7f0000000940)="55d1a50854e5455728a2bc08f730ea805b7cdab6077e2dcfa00ed191c5710d852a4237cf19b1f0f7a0c6907c0aaf5626a0eab4424ba204178f41c04a47e490e0c1f2c0d0bde73e59d06034536258a6d30e4392ebcd886df9c89b36240782eaf202015649a8eb699f6520167b82eac19f682a60f58601d45e38624780d6fe12c25a84c8f8c26e24047b6a3c195e9c4201043f5ee4d974f713035da345d2bc6f49e714e379cdff13be5541e6409060f05ed7ef1512c60b3070c2794fb1c19407180bffc6a5144da7b3bc590fba8f900573051b5186b3d24c66c3a7b351dda72f6e89", 0xe1}, {&(0x7f0000000a40)="319d3e4b890747ad5a7bba271c3e2f4e5464792aa0829c421e6409aab3d6fd00087af00ce77866fcc9a5", 0x2a}, {&(0x7f0000000a80)="edc95bfbbb0a88ac76dce97f0d51212246511455c0ef047d086f1d8e399f32dee8963d805d62316fb9f127f8b22185aa9e27c5f81273436ff0669ceedeb877f59b4d0b879a12b28f71385e852a9d93e601b0b2c4d81f9033bbab14fa8e540b69ac880f70117a9f98e42e4cbb1f8d289684f9a81dfc231ea7f8983d46ae5d2a6028c70ba7ae804a58d7ce0840149cfc2048ad0ea4d311b95e3862b10f52ee17173fde505bffea00e13bc8eb314b2666758541a53a785533d50d", 0xb9}, {&(0x7f0000000b40)="f49f22983e0c97713e33fc772f3f5fadf79f138a8ef3d80ec5acef1c24ba4394ddb4b0115c193394cdbe75e512e63e83b4ff054d6dd1cf4be1f0f222", 0x3c}, {&(0x7f0000000b80)="299211d25fe5eaa564ade63c402b206fe23ffdb410ebb30317563183a9eb58dad67200c9abc7609d19ffdb", 0x2b}, {&(0x7f0000000bc0)="221a7d4a4dab9d4c8a852554e259f10ca76939cd7abf4e90dab75464e1c3c9bece72addbbf0e499ba3a2f1ccf23b554b7a308f", 0x33}, {&(0x7f0000000c00)="10c1b7b730f2a7bf9f054c718607147e4ea17ba2c061081b65286038fc12462d124bc7444b2213b35f6743df21d68f1f1c21f885f2e60850aa8c2b3161e6e8ab3fb3337a9611ccda54945c6934f945f1186d88863cc49f5020f7b64bd5f3eb8e91d57bc7a60ed68d951d8e024e4eb6faa66136cf059543af67b4489efceff8a353e872cc4d06d8af4cc0698dff04269cc4f5d6e633a78c14b6cc53769f7312d7f5628097da7b52b36c713c66bf30ab1cd2258bfef30c60a3954fe5af00e8b302d0617267d663bdf52b5d3c368205e08963a1f1923b584a64cf02e07c96377269eacd9adfe99e7e82db8d4fc6ce42772d964c90e2324471c93c", 0xf9}, {&(0x7f0000000d00)="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", 0x1000}], 0xa) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:34:59 executing program 2: add_key(&(0x7f00000002c0)='dns_zesolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) getsockname$netrom(r1, &(0x7f00000003c0)={{0x3, @null}, [@netrom, @remote, @remote, @rose, @netrom, @bcast, @remote, @bcast]}, &(0x7f0000000100)=0x48) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[], 0x12f) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000280)) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000500)={r2, 0x7, 0x7fff, 0x7e98}, 0x275) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f00000004c0)='y\x00', 0x2, 0x169ea9cb6398a581) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2, 0x3}, 0x10) fstat(r1, &(0x7f0000000440)) 03:34:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x10001, &(0x7f0000000380)="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") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) [ 486.496787][T27668] QAT: failed to copy from user cfg_data. 03:34:59 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x40096100, 0x0) 03:34:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_pts(0xffffffffffffff9c, 0xc0400) getsockopt(r0, 0x5, 0x4a, &(0x7f0000000300)=""/169, &(0x7f00000003c0)=0xa9) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000000)=0x8) socketpair(0x2, 0x0, 0x400, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r4, 0x808, 0x70bd2b, 0x25dfdbfe, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$TIOCSSOFTCAR(r3, 0x40096101, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000200)={{0x9, 0xffffffff, 0x87d7, 0x100000000, 0xffff, 0x3}}) [ 486.555297][T27670] QAT: failed to copy from user cfg_data. 03:34:59 executing program 2: r0 = add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000340)={r3, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r1, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000280)="c0661e0630d6ee95c0f9169680e6335e9803ecdc0a25d376fbc9b9329f59975447f4993fda4a29228dfeb42d83e002949871a687d846facc20ff861ba7", 0x3d, r0) 03:34:59 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x428bdc59, 0x20000) ioctl(r0, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffc, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000000)={{0x100000000, 0xfffffffffffffffc, 0x20, 0x98, 0x6, 0x2}, 0xffff, 0x2}) write$P9_RUNLINKAT(r1, &(0x7f0000000080)={0x7, 0x4d, 0x2}, 0x7) 03:34:59 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) 03:34:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f00000001c0)=""/12) [ 486.863239][T27800] QAT: failed to copy from user cfg_data. [ 486.891477][T27800] QAT: Invalid ioctl [ 486.918993][T27809] QAT: failed to copy from user cfg_data. [ 486.948740][T27800] QAT: failed to copy from user cfg_data. 03:35:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x30}, {&(0x7f0000000680)=""/120, 0x78}, {0x0}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:35:00 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) r3 = getpid() perf_event_open(&(0x7f00000003c0)={0x3, 0x70, 0x3, 0x40, 0x7fff, 0x8, 0x0, 0x3, 0x80080, 0x2, 0xffffffffffff23fb, 0x9df, 0x2b4d, 0x10001, 0x7fffffff, 0x9, 0x6, 0x81, 0x4, 0x4, 0xffff, 0x6, 0x7, 0x800, 0x3, 0x80000001, 0x3f, 0x10000, 0x1d96, 0x10001, 0xff, 0x1, 0xfffffffffffffffb, 0x887, 0x9, 0x800, 0xf6, 0x5, 0x0, 0x8000, 0x2, @perf_config_ext={0xc6b3, 0x2}, 0x20, 0x80, 0x5, 0x1, 0x0, 0x125387c1, 0x5}, r3, 0x9, r1, 0x2) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:35:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r2 = getpgid(0x0) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/pid\x00') ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:35:00 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) 03:35:00 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) r1 = getpgid(0x0) rt_tgsigqueueinfo(r0, r1, 0x10, &(0x7f0000000040)={0x4, 0xe3, 0x8}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x40096101, 0x0) 03:35:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1c}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:35:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x90100, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000200)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r3}) r4 = geteuid() ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000140)={0x8, 0x0, r2, 0x0, r4, 0x0, 0x6d6, 0x5}) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x5, 0x480000) ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0x9) ioctl$TIOCSSOFTCAR(r5, 0x40096101, 0x0) 03:35:00 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) [ 487.445823][T27923] QAT: failed to copy from user cfg_data. [ 487.468847][T27917] QAT: failed to copy from user cfg_data. [ 487.475818][T27926] QAT: failed to copy from user cfg_data. 03:35:00 executing program 2: clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000003c0)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}, @in6={0xa, 0x4e24, 0x6, @mcast2, 0x3}, @in6={0xa, 0x4e20, 0x1f, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}, @in6={0xa, 0x4e22, 0x6, @rand_addr="d6acf215f6e49b3f889cff2b480fe65b", 0x76d5}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e20, 0xfffffffffffffae8, @local, 0xf3c}], 0x90) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 487.610698][T28025] QAT: failed to copy from user cfg_data. 03:35:00 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/122) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:35:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xffffffffffffffff, &(0x7f00000002c0)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x600}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x100}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r3, 0xc0c85666, &(0x7f0000000380)={{0x4, @addr=0x8}, "7c1e2ecc285b5f9a72e977417b829f9ffd02261f41bf310a3cc780712764ed5f", 0x2}) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r4 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x101080, 0x40) ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000340)={'rose\x00', 0x400}) 03:35:00 executing program 4: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) [ 487.722295][T28048] QAT: failed to copy from user cfg_data. [ 487.815895][T28058] QAT: Invalid ioctl [ 487.843711][T28065] QAT: failed to copy from user cfg_data. [ 487.865991][T28058] QAT: failed to copy from user cfg_data. 03:35:01 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x30}, {&(0x7f0000000680)=""/120, 0x78}, {0x0}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:35:01 executing program 2: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='.dead\x00', 0x0, 0x0, 0xfffffffffffffe42, r0) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000340)={r3, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r1, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:35:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) 03:35:01 executing program 4: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) 03:35:01 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x40000, 0x0) 03:35:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000180)=""/160, &(0x7f0000000240)=0xa0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'teql0\x00', 0x203}) 03:35:01 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x80000000100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 488.302067][T28181] QAT: failed to copy from user cfg_data. [ 488.329210][T28179] QAT: failed to copy from user cfg_data. [ 488.340349][T28184] IPVS: length: 160 != 24 03:35:01 executing program 4: clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) [ 488.399470][T28189] QAT: failed to copy from user cfg_data. 03:35:01 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) getpeername$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) sendmsg$kcm(r1, &(0x7f0000000740)={&(0x7f0000000440)=@ll={0x11, 0x1c, r3, 0x1, 0xff, 0x6, @remote}, 0x80, &(0x7f0000000500)=[{&(0x7f00000004c0)="0f02aaf5912329d5c037aa6bbacf000c35b8d189e1376647128ad54b43572c28d84f6419824b572c847152dcfa4bd7f500a8477ff110", 0x36}], 0x1, &(0x7f0000000540)=[{0x58, 0x10d, 0xfffffffffffffffb, "beff6515fb10bb5ce2cce2033cba51b6f3534a39e7f7fa9f01b21807c78ad0378c49eab37bf2bc64beaf3c5971298f7a9d43cd6ed0141113dbe85e190d034d7922ff021c3f67d310"}, {0xc0, 0x105, 0x8, "de163d8c715f60a0cc13893bfd08e26dc60635b416f43b5caf781398cba1db9fb9f8bffb4747c468fcb64d76ef768809a739fa74d348b0ffeedf328ad9a1a9fde08afb4faea5041afaccfe257def25b1b673c5e5094fd61b45df0453949434b66591416e35a37b6ba44f51b679259151af4677355b195f6b1baa3804a7c142e741384e3c0e892e86a43a70f0b79585c6ceb1053bf7a643a9ba57bdcf4bb1b5f766937a2e8966bee180c2d66b15"}, {0xc8, 0x10d, 0x3, "3a98c9af2de6332dd3d4762d9e745f81a90be453fc1459b661c105a6234654bef4b494cb9e349cf78b23972af07ddaa533abac787eb36abb9774bf9239873a6dc20332400596e4e2d70cf8abf432364b6f50d473dfebe78ba3e26c4f0c797855fecaf4c2d20bf179eeb5883b4da6f73c1e3b41ec152a67aadb236e77168ac9882a5b1b10cf3c378a35f63ac4812e43e7792bdcda61bd13553110a4977aaae3d25fc9449126e718379d70bce6b8b890dc53730e58"}], 0x1e0}, 0x20004001) 03:35:01 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) [ 488.439761][T28249] QAT: Invalid ioctl [ 488.508899][T28184] IPVS: length: 160 != 24 [ 488.523983][T28303] QAT: failed to copy from user cfg_data. 03:35:01 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xc100, 0x1) fchdir(r0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:35:01 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) [ 488.632963][T28312] QAT: failed to copy from user cfg_data. [ 488.727366][T28317] QAT: failed to copy from user cfg_data. [ 488.749102][T28321] QAT: failed to copy from user cfg_data. 03:35:02 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x30}, {&(0x7f0000000300)=""/230, 0xe6}], 0x2}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:35:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$mice(0xfffffffffffffffd, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x8, 0x10}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={r2, 0x38, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x2, @mcast1, 0x8}, @in6={0xa, 0x4e22, 0x3f, @remote, 0x7}]}, &(0x7f00000001c0)=0x10) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1000, 0x0) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f0000000000)={{0x0, 0x9}, 0x21}, 0x10) ioctl$TIOCSSOFTCAR(r3, 0x40096101, 0x0) userfaultfd(0x80000) 03:35:02 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000480)='/dev/vbi#\x00', 0x0, 0x2) getresuid(&(0x7f00000004c0)=0x0, &(0x7f0000000500), &(0x7f0000000540)) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@mcast2, @in6=@loopback, 0x4e22, 0x0, 0x4e21, 0x2, 0xa, 0x20, 0xa0, 0x0, 0x0, r1}, {0x1000, 0xffffffffffffa41d, 0xc2b5, 0x4, 0x25942e05, 0xffffffffffffffff, 0xff, 0x100000001}, {0x1, 0x1, 0x6, 0x8}, 0x80, 0x6e6bbf, 0x3, 0x1, 0x1, 0x3}, {{@in=@broadcast, 0x4d6, 0x2b}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x0, 0x0, 0x0, 0x7f, 0x8df, 0x7, 0x2}}, 0xe8) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x107601) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x803) add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) inotify_add_watch(r2, &(0x7f0000000400)='./file0\x00', 0x40) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) connect$vsock_dgram(r2, &(0x7f0000000300)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000100)={@initdev, @broadcast}, &(0x7f0000000280)=0xc) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000440)={0x3ff, 0x9, 0x205, 0x7fff, 0x4, 0x9, 0x100, 0x3ff, r5}, 0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000340)={r5, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r3, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) r6 = semget(0x0, 0x4, 0x402) semctl$SETVAL(r6, 0x4, 0x10, &(0x7f00000003c0)=0x671e) 03:35:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f00000001c0)={0x0, @bt={0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x30a, 0x69b6261, 0x7, 0x5, 0xcb99, 0x0, 0xa820, 0x4, 0x10, 0x8}}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000280)) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000340)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000440)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@empty, @in6=@loopback, 0x4e23, 0x80, 0x4e21, 0x47, 0xa, 0x80, 0x20, 0xc, r4, r5}, {0x7fff, 0x800, 0x100, 0x1ff, 0x1, 0x5, 0x2, 0x86}, {0x4820, 0x3, 0x5, 0x401}, 0x7, 0x6e6bc0, 0x0, 0x1, 0x1, 0x2}, {{@in6=@empty, 0x4d5, 0x6c}, 0xa, @in6=@mcast2, 0x3503, 0x3, 0x0, 0x220, 0x1ff, 0xfffffffffffffff9, 0x8}}, 0xe8) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) prctl$PR_GET_ENDIAN(0x13, &(0x7f00000002c0)) 03:35:02 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) 03:35:02 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockname$llc(r0, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000200)=0x10) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) r1 = getpgid(0xffffffffffffffff) rt_tgsigqueueinfo(r1, r1, 0x23, &(0x7f0000000140)={0xf, 0x8, 0x9}) capset(&(0x7f0000000080)={0x200f1526, r1}, &(0x7f00000000c0)={0x100000000, 0x2, 0x4, 0x3, 0x3, 0x2}) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') [ 489.253756][T28437] QAT: failed to copy from user cfg_data. 03:35:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101000, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) dup(r1) openat$null(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/null\x00', 0x0, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000140)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000980)='/dev/qat_adf_ctl\x00', 0x10080, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x2100, 0x0) fstat(r1, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000a40)=0xc) write$FUSE_ENTRY(r3, &(0x7f0000000a80)={0x90, 0xfffffffffffffff5, 0x8, {0x2, 0x2, 0x8, 0x80000000, 0x38c4, 0x5, {0x2, 0x5, 0xa93, 0x7fffffff, 0x3, 0x7, 0x0, 0x30, 0x1f66, 0x9, 0x22, r4, r5, 0xf9d, 0x1}}}, 0x90) ioctl$TIOCSSOFTCAR(r2, 0x40096101, 0x0) sigaltstack(&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000b80)) [ 489.296620][T28435] QAT: failed to copy from user cfg_data. 03:35:02 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) recvmsg(0xffffffffffffff9c, &(0x7f0000000100)={&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, &(0x7f0000001440)=""/4096, 0x1000}, 0x10040) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000280)={0x0, 0x7530}, 0x10) r2 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000340)={r3, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:35:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x40002800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:35:02 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x100001000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getpeername$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x14, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@call, @call={0x85, 0x0, 0x0, 0x31}, @map={0x18, 0xb, 0x1, 0x0, r0}, @jmp={0x5, 0x2, 0x1, 0x6, 0x5, 0xffffffffffffffe0, 0x10}, @alu={0x4, 0x1000, 0xd, 0x1, 0xf, 0x6, 0x10}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x2, &(0x7f00000000c0)=""/2, 0x40f00, 0x0, [], r1, 0x25eaba4c04c423bf, r0, 0x8, &(0x7f0000000280)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0xd33e, 0x4}, 0x10}, 0x70) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:35:02 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) 03:35:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) getsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f00000001c0)=""/242, &(0x7f0000000140)=0xf2) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f00000003c0)=0xe8) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000400)={@multicast2, @multicast1, r3}, 0xc) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) accept4$llc(r1, &(0x7f0000000440)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x10, 0x80000) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000004c0)) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/self/net/pfkey\x00', 0x20080, 0x0) bind$bt_hci(r4, &(0x7f0000000ac0)={0x1f, r3, 0x1}, 0xc) [ 489.642332][T28572] QAT: failed to copy from user cfg_data. [ 489.676186][T28577] QAT: failed to copy from user cfg_data. [ 489.690581][T28569] QAT: failed to copy from user cfg_data. [ 489.718358][T28578] QAT: failed to copy from user cfg_data. 03:35:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x30}, {&(0x7f0000000300)=""/230, 0xe6}], 0x2}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:35:03 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) sendmsg$nfc_llcp(r1, &(0x7f0000000280)={&(0x7f00000003c0)={0x27, 0x0, 0x0, 0x0, 0x1, 0x86, "2765526f77278bf586cbca82f460cbe906f9bcfaf0857d8ca8c6a067a21b8f010f7894ebef7699631879a0bb1815fd2156d05485dd11a04bafe990d42512ec", 0x39}, 0x60, &(0x7f0000000000)=[{&(0x7f0000000440)="4a8928b223e36d8893d9e96204a612e712828293e6b41b2e306f2debf62f79f033628e1288bdb19b40d120c17f5a90c686b96aba91a4f9b707702f0f73fc79f8f062b83590e158", 0x47}, {&(0x7f00000004c0)="bdb4cba1d7ac71f8b5276573bc8cb904a7bc69c4fe29b375ab7a36d9dba692cd1422094e2f31fcff373055372fb486f277ce64aed8df7585c4ffe914aa149537cfb398bbf264780db5e8a31650685505fbf005987f154c400739ecbf1bf1ba13eaf7bc0ca4699b30b519f6dfecf4b294a24a82cc7d263160c3dda9287509893e7abb9ab7d254", 0x86}, {&(0x7f0000000580)="ef05305ff8948ba7bbbe8078cab69b2ca9c08ad3d3ca65bb7d8f05f108a960301677e74ac682bc8723be7e6c3b18e2bb6394b952533d98f92f7a6356c72373b7a2fc36e8aee83c0202fc7218555e28cfa99d09c07f53f699ba62b7003595ef1cbef21c7d7de3a4832916c473205714b89580", 0x72}], 0x3, &(0x7f0000000100)={0x40, 0x0, 0xfffffffffffff800, "0a269ed557986f63d1888f319f3db021ef1fdd14a6aa99de55ca6cb5cb18361aeed7c012141c6a24ff"}, 0x40, 0x1}, 0x40) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:35:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) truncate(&(0x7f0000000180)='./file0\x00', 0x10002000000000) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@struct={0xa, 0x3, 0x0, 0x4, 0x5, 0x2, [{0xf, 0x2, 0x20}, {0xb, 0x2, 0xb893}, {0xb, 0x5, 0x4}]}]}, {0x0, [0x30, 0x5f, 0x61, 0x30, 0x61, 0x7f, 0x0, 0x5f]}}, &(0x7f0000000240)=""/234, 0x52, 0xea, 0x1}, 0x20) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000080)) connect$l2tp(r1, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x1, {0xa, 0x4e22, 0x2, @local, 0x4}}}, 0x3a) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x80880, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x40096101, 0x0) 03:35:03 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000140), 0x1000) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:35:03 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) 03:35:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008b12, &(0x7f0000000300)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0xe45cb08014e071cf, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000003c0)=0x10d000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x1fc}) write$P9_RWSTAT(r2, &(0x7f0000000400)={0x7, 0x7f, 0x2}, 0x7) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) write$P9_RREAD(r4, &(0x7f00000001c0)={0xc6, 0x75, 0x2, {0xbb, "e36d099a5b86f100f1303c6e790021d830e53776f3c412331692ad28e1f4dfa82feb3682c448fdf5bdc662bddeedaa83197a7695a12e95051e2a74c7758431fcad29ca024fb8a86d446ece9a56fe89c20310a385c488d14309da4d1f1e4ee3bb273a3108849d0f73b3bd97cb0c72bf3bc89ed9c20b08d3193cadd70cc6b2eca77adf0ff6db937188b88df8e716606ae64174c267bbe5f72da20eda15e0f6df96c18f3c8027d3653cc28b3a3f273722479c93000ab8ba7cf855d987"}}, 0xc6) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x3ff, 0xff, 0x873, 0x3e, 0x0, 0x8, 0x2030, 0xe, 0x7f, 0x7830, 0x2, 0x20, 0x401, 0x908, 0x1, 0x200, 0x6f5, 0x101, 0x4, 0x0, 0x7, 0x80, 0x6, 0x2, 0x4, 0x1, 0x8000, 0x3, 0x8000, 0x6, 0x2, 0xe4f, 0x7ff, 0x80000001, 0xc0, 0x200, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x8}, 0x0, 0x3ff, 0x4, 0x7, 0x3, 0x8, 0x1}, r5, 0x9, r4, 0x8) 03:35:03 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) [ 490.170611][T28699] QAT: failed to copy from user cfg_data. [ 490.221718][T28714] QAT: failed to copy from user cfg_data. 03:35:03 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x58, 0x0, &(0x7f0000000200)=[@acquire={0x40046305, 0x3}, @increfs, @acquire_done={0x40106309, 0x1}, @release={0x40046306, 0x2}, @acquire={0x40046305, 0x1}, @request_death={0x400c630e, 0x3}, @acquire_done={0x40106309, 0x2}], 0x79, 0x0, &(0x7f0000000280)="1bb251a993f9f806f3f954976101d73e160683141b92e662bf29c6223505d76e69b92d99841e1a6d60c3c99538416768049552faa82f77550b35f09e455b15208422d2f8f26fce57974c719890e53a6cec1ff6820b1b8434254bd5844ceeffe355b3c1c76f580e985503bf583750dee75f04efaa3f280f0b9f"}) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000080)={0xdb, 0x2, 0x83, &(0x7f0000000140)="d4de426fdeb12ba445e6c80a63fd901763a2fac6d35695ca514f699db441b278283a28d55b9f47979037c7a395b401e02ec02d74b0a39c748426627a64555b60c0d595f9c8b65d20a22e7cf971114a7cb0b9490783fd9eebc94e930eea7a9667e5ce1c8130fedf97a2096a509f02ab1e4d636fd830e333bec0a6ff19ee36e29cdb1e22"}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x40096101, 0x0) 03:35:03 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) 03:35:03 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000300)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000340)={r3, 0x68, &(0x7f0000000080)=[@in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e21, 0x293b, @rand_addr="92cae15a1888a965268083ca02a5822e", 0x3}, @in6={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @rand_addr=0x1}]}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r1, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000280)={'syz'}, &(0x7f0000000100)='dns_resolver\x00', 0xfffffffffffffffc) 03:35:03 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x111400) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000000c0)=0x5, 0x4) getsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) flock(r1, 0xa) 03:35:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="7b00000000000000df250800000008000600090000044bd3b7c4bcaa95acd46843f8a261420e6709ef6042940f2b46809c254f27d656cb55dd8e6bbb153a49c2feff533ff85e056020eb72eee4801e20d41b6e9cdb49af52a4cfff2af972c84b9ada4b4bff"], 0x1c}}, 0x4000000) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2200820}, 0xc, &(0x7f0000000780)={&(0x7f0000000240)={0x528, r4, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}]}, @TIPC_NLA_BEARER={0x134, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1c00000000000000, @rand_addr="c0acd798225fd0de25b56998514f149e", 0x8}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'irlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x10, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xa5, @remote, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x19}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_BEARER={0x28, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffffe}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4, @ipv4={[], [], @empty}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @loopback, 0x200}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'bcsh0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x9, @mcast1, 0x7fff}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x800, @local, 0xfff}}}}]}, @TIPC_NLA_LINK={0x154, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb12}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x932}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x65}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x642}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}]}]}, 0x528}}, 0x40) [ 490.529563][T28835] QAT: failed to copy from user cfg_data. [ 490.547333][T28834] QAT: failed to copy from user cfg_data. 03:35:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8000, 0x8e0be06a51edb39c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000080)={0x3, 0x9, 0x8001, {0x0, 0x1c9c380}, 0x1ff, 0x5}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x40096101, 0x0) 03:35:04 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x40096100, 0x0) 03:35:04 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x1000000000000008, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:35:04 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x30}, {&(0x7f0000000300)=""/230, 0xe6}], 0x2}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:35:04 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) dup2(r0, r1) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x501100, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x40096101, 0x0) 03:35:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000001c0)={0x9, 0x7, 0x7, 0x2, 0x9}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r3 = fcntl$getown(r1, 0x9) sched_setscheduler(r3, 0x5, &(0x7f0000000140)=0x2) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:35:04 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x7fff, 0x1f, 0xffffffffffffff7f, 0x200, 0x3}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={r2, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0xfffffffffffffffd, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x5, 0x100000000, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r3, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 491.142036][T28956] QAT: failed to copy from user cfg_data. 03:35:04 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x40096100, 0x0) 03:35:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1004101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80000, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) [ 491.182920][T28968] QAT: failed to copy from user cfg_data. 03:35:04 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000400)='/dev/radio#\x00', 0x3, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:35:04 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x40096100, 0x0) 03:35:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x800, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) setpgid(r2, r3) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) setxattr$security_smack_transmute(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000280)='TRUE', 0x4, 0x1) sysfs$1(0x1, &(0x7f00000002c0)='security.SMACK64TRANSMUTE\x00') 03:35:04 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x40800) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000080)) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000040)=0x8, 0x8) ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xde0}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x20000050) 03:35:04 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000080)={0x7, 0x2}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x40096101, 0x0) [ 491.369529][T29062] QAT: failed to copy from user cfg_data. 03:35:04 executing program 4: r0 = add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) request_key(0x0, &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', r0) [ 491.553740][T29103] QAT: failed to copy from user cfg_data. [ 491.652393][T29111] QAT: failed to copy from user cfg_data. 03:35:05 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x30}, {0x0}, {&(0x7f0000000300)=""/230, 0xe6}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:35:05 executing program 2: clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:35:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:35:05 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffff9, 0xc000) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00000002c0)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='openpromfs\x00', 0x20, &(0x7f0000000200)='/$vboxnet1em0wlan0bdev[wlan0$md5sumposix_acl_accesswlan0!proc$vmnet1ppp1\x00') ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000000)="48317b2a1f89a969ca4bf398a25ba18cfda90652f28fa15216393efe3fffb9bd50fd0bbb32c2129b3ac337b540af5469bcc3063d482b25d215f62d3115371c83f244532e544d51df9ac745f9bfed69a809927ee6b7d895e0ba62020cbef94cf080e693adae7aa5b854ed7e81af14df34cf2bbf14a2a87fc9fe5be14062d516f90664769606f7f2b8223732eac75b6d2cf47f9f621af7c1db8a40b0ad0b5c976431b0eb74882c7baf5e2fe286022277377cd0c5c075c665f93f64922a35c2a05b90589905133cd85c343877ae12a5d57d28ed1eac3d99565de509c68344856c16") r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x40096101, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000300)=0x100000001) 03:35:05 executing program 4: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:35:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x40, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000340)=ANY=[@ANYBLOB="01000200aeaaaaaaaaaaaaaaaaaaaabb"]) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000002c0)={0x17, 0xc7, &(0x7f00000001c0)="3b1bb7837769b7ab50807afd70d7e719fc3cc3efdfdae2bdf01c9fcb920280ea20e21ac1fcd1abc8632bd463bb9b858e845a9b803e40c75132a82076026821ade187ec6fcee8374ad068405fd047ca7c3ee913cb356cbdb4615b9baf56bcbb0099ae9643fd13d24237dffa271822b04ce965d173bec2bbed97dfa7944714e81f0afa4fe011386a0e57f8328a66c5e988cd0b9eebef5cf18b2c0a43e0b4f3b82644c7730418c15883ac14d341f49691a54aa446588f817b02734db192f8549c499bad3472dca7f2"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x40, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000400)={{0x742, 0xffff}, 0x1, 0x0, 0x7fffffff, {0x7, 0x8001}, 0x3, 0xbe2}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000300)={0xaa, 0x20}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:35:05 executing program 4: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:35:05 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 492.065660][T29237] QAT: failed to copy from user cfg_data. [ 492.173402][T29236] QAT: failed to copy from user cfg_data. 03:35:05 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x60000, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x400000, 0x10) 03:35:05 executing program 4: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:35:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x200000, 0x0) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000001c0)=0xf0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000240)={0x7fff, 0x7f8c, 0xe6e2}) [ 492.273616][T29358] QAT: failed to copy from user cfg_data. [ 492.312942][T29361] QAT: failed to copy from user cfg_data. 03:35:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x40000080, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [{0x20, 'cgroup'}, {0x20, 'vmnet1$'}, {0x20, 'veth0_to_hsr\x00'}, {}, {0x20, 'veth0_to_hsr\x00'}, {0x20, '/dev/qat_adf_ctl\x00'}], 0xa, "4279ea16a48e615f26f2ca661b492946006ce9cd3bb629c861c103ac15378f6db2d47bc1da20feef2f1b634015ed06776f46d5364fd4797e403ad2d2be12ef6c73f11ac8d4271aa932b0adf0590aea7f75805decf3822e2a5da4835fdac34c17c041a0869a0bb1be67256923c615b7fd9fb676ede8802ca68ccfa7ed5d81219269be34b66f17fe2ef6aee61a49893fe64839005cdc21871f0540"}, 0xe3) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x410}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000080)={{0x7, 0x100}, 0x1, 0x81, 0x6d45, {0xdb6f, 0x6}, 0x8, 0x9}) [ 492.627103][T29475] IPVS: ftp: loaded support on port[0] = 21 [ 492.641504][T29479] QAT: failed to copy from user cfg_data. [ 492.649490][T29479] QAT: Invalid ioctl [ 492.735592][T29479] IPVS: ftp: loaded support on port[0] = 21 [ 492.771749][T29475] QAT: failed to copy from user cfg_data. [ 492.778389][T29479] QAT: Invalid ioctl 03:35:06 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x30}, {0x0}, {&(0x7f0000000300)=""/230, 0xe6}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:35:06 executing program 2: r0 = add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x9d, 0x5}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000300)={r3, 0x9, 0x30}, &(0x7f00000003c0)=0xc) r4 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000340)={r5, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r1, 0x5425, 0x17a) r6 = msgget(0x1, 0x0) msgrcv(r6, &(0x7f0000000400)={0x0, ""/184}, 0xc0, 0x2, 0x1800) keyctl$get_keyring_id(0x0, r0, 0x0) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000004c0)=r2) 03:35:06 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = dup(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @multicast1}}, [0x3, 0x400, 0x4, 0xc9, 0x80000001, 0x8fd0, 0x1, 0xfffffffffffffff9, 0x1909d7e3, 0xecad, 0x1, 0xfffffffffffffffe, 0x1000, 0x32f7, 0x8]}, &(0x7f0000000140)=0x100) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000180)={r1, 0x6}, 0x8) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$llc_int(r0, 0x10c, 0xf, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCCBRK(r2, 0x5428) ioctl$TIOCSSOFTCAR(r2, 0x40096101, 0x0) dup(r2) 03:35:06 executing program 4 (fault-call:3 fault-nth:0): socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) 03:35:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x2081, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0xc, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'veth0\x00'}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:35:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) write$P9_RSYMLINK(r1, &(0x7f0000000000)={0x14, 0x11, 0x1, {0x12, 0x3, 0x2}}, 0x14) 03:35:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x20, 0x800) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) bind$can_raw(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x40096101, 0x0) [ 492.906678][T29492] FAULT_INJECTION: forcing a failure. [ 492.906678][T29492] name failslab, interval 1, probability 0, space 0, times 0 [ 492.938155][T29490] QAT: Invalid ioctl [ 492.949778][T29490] QAT: failed to copy from user cfg_data. [ 492.968540][T29492] CPU: 1 PID: 29492 Comm: syz-executor.4 Not tainted 5.2.0-rc3-next-20190607 #11 [ 492.977681][T29492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 492.987755][T29492] Call Trace: [ 492.991079][T29492] dump_stack+0x172/0x1f0 [ 492.995433][T29492] should_fail.cold+0xa/0x15 [ 493.000036][T29492] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 493.005963][T29492] ? ___might_sleep+0x163/0x280 [ 493.010831][T29492] __should_failslab+0x121/0x190 [ 493.015773][T29492] should_failslab+0x9/0x14 [ 493.020300][T29492] __kmalloc+0x2d9/0x740 [ 493.027069][T29492] ? tomoyo_realpath_from_path+0xc0/0x7a0 [ 493.032816][T29492] ? rcu_read_lock_sched_held+0x110/0x130 [ 493.038539][T29492] ? tomoyo_realpath_from_path+0xcd/0x7a0 [ 493.044261][T29492] tomoyo_realpath_from_path+0xcd/0x7a0 [ 493.049819][T29492] ? tomoyo_path_number_perm+0x193/0x520 [ 493.055465][T29492] tomoyo_path_number_perm+0x1dd/0x520 [ 493.060921][T29492] ? tomoyo_path_number_perm+0x193/0x520 [ 493.066565][T29492] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 493.072405][T29492] ? __fget+0x384/0x560 [ 493.076571][T29492] ? ksys_dup3+0x3e0/0x3e0 [ 493.081015][T29492] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 493.087270][T29492] ? fput_many+0x12c/0x1a0 [ 493.091705][T29492] tomoyo_file_ioctl+0x23/0x30 [ 493.096495][T29492] security_file_ioctl+0x77/0xc0 [ 493.101442][T29492] ksys_ioctl+0x57/0xd0 [ 493.105620][T29492] __x64_sys_ioctl+0x73/0xb0 [ 493.110218][T29492] do_syscall_64+0xfd/0x680 [ 493.114752][T29492] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 493.120649][T29492] RIP: 0033:0x459279 [ 493.124548][T29492] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 493.144445][T29492] RSP: 002b:00007fb0a641dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 493.152882][T29492] RAX: ffffffffffffffda RBX: 00007fb0a641dc90 RCX: 0000000000459279 [ 493.160862][T29492] RDX: 0000000000000000 RSI: 0000000040096100 RDI: 0000000000000004 [ 493.168952][T29492] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 493.176948][T29492] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb0a641e6d4 [ 493.184933][T29492] R13: 00000000004c3aef R14: 00000000004d7650 R15: 0000000000000005 03:35:06 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000440), &(0x7f0000000100)=0x65) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x80) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x1) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:35:06 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000040)={0x8, 0xe, 0x20, "44487ccd2501b3d622a973dfd595fa282b046f50ba1e242f51d2b7c32cdaff99bf9589a803102e3eea4de8710fd2036e2950973d2a6a885a9f221acd", 0x32, "d4f3b735ac4b3e69f26a27634497563033f82171bec55bb7c31d097a3c2458614f883cc759e8fcb0747bf4ed2817fd910dfd164a407d736b2f9d2919", 0x40}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) [ 493.388631][T29612] QAT: failed to copy from user cfg_data. 03:35:06 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0xf0, 0x0, 0x6, 0x400, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x7}, [@nested={0xdc, 0x7b, [@typed={0x8, 0x90, @str='$\x00'}, @generic="5de17a831f9a0ea70d820f8decc8c357b8718186fc94b77fd8e83aa23179da27c0b95eb8ebabfbce8f972076e89a8d79bbd8cf85216f8592787d", @generic="dd8aeccb1434de882d8823bbb37cece868b413731149add7b051148f92ba24a3a8e1b062bc266aa0dc654583acfb0a01ac8edb0715d102dfb0c2c22298e27650ac8b30073c8cf933f3e17d6f2b82407a7d4b09f8cb4d172e9f95de1fb1e9ae4f5097a2b01ef3f09510a9aaee8e9866f399dcc3a705f91753c8d0ff2bcbccf7f16f30100e16323bb93c2916a781e181ee13a147"]}]}, 0xf0}}, 0x4) write$P9_RVERSION(r1, &(0x7f0000000540)=ANY=[], 0xfffffffffffffff8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000300)) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 493.464230][T29615] QAT: failed to copy from user cfg_data. 03:35:06 executing program 2: r0 = add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e22, 0x9, @rand_addr="21b6b9536bcf48172e2fb77a8c657f71", 0x5}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e24, 0x2, @mcast2, 0x2b8}, @in6={0xa, 0x4e24, 0xfe00000000000000, @mcast2, 0x3}, @in6={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, [], 0xb}, 0x9}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e22, 0x2, @empty, 0x1}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e20, 0x3, @local, 0x80}, @in={0x2, 0x4e24, @remote}], 0xe8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYPTR=&(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYRES32=r2, @ANYRESDEC=r0, @ANYRES16=0x0], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES32]], 0xfffffffffffffe78) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000340)={r3, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r1, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:35:06 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x10000fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) iopl(0xee9f) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000140)={0x3, {{0x2, 0x4e20, @empty}}, 0x0, 0x3, [{{0x2, 0x4e20, @rand_addr=0x5}}, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x210) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x4a8, 0x140, 0x0, 0x140, 0x3c0, 0x3c0, 0x3c0, 0x4, &(0x7f0000000040), {[{{@arp={@multicast1, @dev={0xac, 0x14, 0x14, 0x25}, 0xff, 0xff000000, @empty, {[0xff, 0x0, 0xff, 0xff, 0xff]}, @empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}, 0x3, 0x8, 0x7, 0x1ff, 0x3, 0x1, 'veth0_to_hsr\x00', 'teql0\x00', {0xff}, {0xff}, 0x0, 0x20}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast1, @loopback, 0xf}}}, {{@arp={@multicast2, @empty, 0xffffffff, 0xff000000, @empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}, @empty, {[0x0, 0xff]}, 0x20, 0x6, 0x6, 0x100, 0x72a, 0x72d6, 'veth1_to_bond\x00', 'veth0\x00', {0xff}, {0xff}, 0x0, 0x20}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="ce2922d9b782", @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @dev={0xac, 0x14, 0x14, 0x20}, 0xf}}}, {{@arp={@loopback, @empty, 0xffffff00, 0x0, @empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}, @mac=@remote, {[0x0, 0xff, 0x0, 0xff]}, 0xff, 0x0, 0xf5d7, 0x8, 0x2, 0xffffffff, 'bond0\x00', 'teql0\x00', {0xff}, {0xff}, 0x0, 0x8}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="7b8c43711292", @dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x81, 0x6}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4f8) [ 493.582323][T29492] ERROR: Out of memory at tomoyo_realpath_from_path. [ 493.597620][T29492] QAT: failed to copy from user cfg_data. 03:35:06 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x30}, {0x0}, {&(0x7f0000000300)=""/230, 0xe6}], 0x3}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:35:06 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) 03:35:06 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x6fb, 0x0, 0x10003, 0x400}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000080)={0x101, r1}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x40096101, 0x0) 03:35:06 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000)=0x20, 0x4) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:35:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x2000}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) [ 493.807168][T29737] QAT: failed to copy from user cfg_data. 03:35:07 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x40000004, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) [ 493.856015][T29742] QAT: failed to copy from user cfg_data. [ 493.926412][T29740] QAT: failed to copy from user cfg_data. [ 493.946945][T29730] QAT: Invalid ioctl 03:35:07 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xa6, 0x20040) [ 493.969573][T29742] QAT: failed to copy from user cfg_data. [ 494.053276][T29833] IPVS: ftp: loaded support on port[0] = 21 [ 494.054970][T29747] QAT: Invalid ioctl 03:35:07 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x4, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x9) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000140)) write$cgroup_int(r0, &(0x7f0000000040)=0x5, 0x12) [ 494.120103][T29866] QAT: failed to copy from user cfg_data. 03:35:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:35:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x80) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x0, 0x0, [0x8, 0xfff, 0x101, 0x80, 0x1000, 0x9, 0x0, 0x1]}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) [ 494.215709][T29870] QAT: failed to copy from user cfg_data. [ 494.251647][T29870] QAT: Invalid ioctl [ 494.256559][T29870] QAT: Invalid ioctl 03:35:07 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r3, 0x20, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) ioctl$CAPI_SET_FLAGS(r1, 0x80044324, &(0x7f0000000400)) 03:35:07 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000100)=0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x480000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x84, r3, 0xb00, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr="f78f739e88b74f1d8c678997bdf84201"}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x4080) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 494.411959][T29833] IPVS: ftp: loaded support on port[0] = 21 [ 494.515512][T29985] QAT: failed to copy from user cfg_data. 03:35:07 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xe6}], 0x2}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:35:07 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vfio/vfio\x00', 0x8000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x28800000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf8, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xaef}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x1000}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20040011}, 0x8001) r2 = syz_open_dev$sndpcmc(&(0x7f0000000440)='/dev/snd/pcmC#D#c\x00', 0x5, 0xc8000) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x100, 0x0) getsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000480), &(0x7f00000004c0)=0x4) setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000080), 0x4) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000000)) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f0000000140)=""/128, 0x80}, &(0x7f00000000c0), 0x4}, 0x20) ioctl$TIOCSSOFTCAR(r3, 0x40096101, 0x0) 03:35:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0xe8) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000080)=r2) setsockopt$sock_void(r1, 0x1, 0xb, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:35:07 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=""/4, 0x4) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:35:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0xc000, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000340)=0x5) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x43732e5398416f1a}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x90) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000380)={0x9, 0x9, 0x7, 0x4, 0x9, 0xfffffffffffffff7}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) [ 494.806678][T30008] QAT: Invalid ioctl [ 494.843009][T30007] QAT: Invalid ioctl [ 494.855429][T30007] QAT: Invalid ioctl [ 494.877025][T30007] QAT: failed to copy from user cfg_data. 03:35:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r0, &(0x7f0000002f80)=[{{&(0x7f0000000000)=@ax25={{0x3, @bcast}, [@rose, @remote, @netrom, @netrom, @rose, @rose, @rose, @netrom]}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000140)=""/220, 0xdc}, {&(0x7f0000000240)=""/216, 0xd8}, {&(0x7f0000000080)=""/78, 0x4e}, {&(0x7f0000000340)=""/208, 0xd0}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/243, 0xf3}, {&(0x7f0000001540)=""/10, 0xa}, {&(0x7f0000001580)=""/216, 0xd8}, {&(0x7f0000001680)=""/16, 0x10}, {&(0x7f0000003300)=""/243, 0xf3}], 0xa, &(0x7f0000001880)=""/229, 0xe5}, 0x8}, {{&(0x7f0000001980)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001a00)=""/83, 0x53}, {&(0x7f0000001a80)=""/198, 0xc6}], 0x2, &(0x7f0000001bc0)=""/167, 0xa7}, 0x80000001}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001c80)=""/176, 0xb0}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/231, 0xe7}], 0x3, &(0x7f0000002e80)=""/219, 0xdb}, 0x1}], 0x3, 0x10020, &(0x7f0000003040)={0x77359400}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000030c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000032c0)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003280)={&(0x7f0000003100)={0x14c, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}]}, @TIPC_NLA_LINK={0x114, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x85b8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xef09}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffc01}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0xc000}, 0xc004) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x40096100, 0x0) 03:35:09 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8, 0x761802) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000800)={r0, &(0x7f0000000840)="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", &(0x7f0000000700)=""/254}, 0x18) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x6) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:35:09 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) fcntl$addseals(r1, 0x409, 0x3) ioctl$TCSBRKP(r0, 0x5425, 0x6) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x8, 0x2, 0x6, 0x2, 0x13, 0x80000000, 0xfff, 0x7f, 0xfffffffffffffffe}) 03:35:09 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0xfffffffffffffffc, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x3800000000000, 0x81, 0x4000, 0x7f2}) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 03:35:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x79df5f844dfe3e35, 0x0) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000001c0)={0x53, 0x400, 0x463e, {0x7fff, 0x4}, {0x0, 0x7ff}, @rumble={0x400, 0x3}}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:35:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000300)=""/230, 0xe6}], 0x2}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:35:09 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x1008fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={0x1f}, 0x0, 0x8) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/userio\x00', 0x88600, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x3654e859783fc1f5, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 496.284191][T30146] QAT: failed to copy from user cfg_data. 03:35:09 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000001c0)=0x80, 0x80800) fcntl$setpipe(r0, 0x407, 0xffffffff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f00000000c0), 0x4) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f0000000000)=0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xffffffffffffffaf}, {0xa, 0x4e21, 0x400000810, @rand_addr="9fac995c630b0d3bf573044f5c795e06", 0x4}, r3}}, 0x48) ioctl$TIOCSSOFTCAR(r2, 0x40096101, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000240)={@mcast1, 0x78, r1}) 03:35:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) [ 496.351683][T30148] QAT: failed to copy from user cfg_data. [ 496.375862][T30252] QAT: failed to copy from user cfg_data. 03:35:09 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000004c0)={0x8, 0x9, 0x3, {0xe, @sdr={0x31435750, 0x8}}}) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000180)={0x1000, 0x0, [], {0x0, @bt={0x401, 0x6800000000000000, 0x1, 0x0, 0x2, 0x1, 0x3, 0x80, 0x4, 0x9, 0x3, 0xb295, 0x5, 0x4, 0x8, 0xc}}}) 03:35:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'\b\x00\x00\xf0\xe7\x00\x00\x03\x03\x00\x04\x00', 0x43732e5398416f1d}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) [ 496.521954][T30259] QAT: Invalid ioctl [ 496.538839][T30259] QAT: failed to copy from user cfg_data. [ 496.594843][T30263] QAT: Invalid ioctl [ 496.615752][T30263] QAT: failed to copy from user cfg_data. 03:35:09 executing program 2: request_key(&(0x7f0000000280)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000003c0)='\x00', 0xfffffffffffffff8) r0 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) add_key(&(0x7f0000000480)='id_legacy\x00', 0x0, 0x0, 0x0, r0) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000005c0)={0x0, 0x58, &(0x7f0000000540)=[@in6={0xa, 0x4e23, 0x9, @local, 0x1ff}, @in={0x2, 0x4e20, @rand_addr=0xffffffff00000000}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e20, 0x1, @mcast2, 0x100}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000640)={r3, 0x0, 0x0, 0x20}, &(0x7f0000000680)=0x10) getsockopt$inet_dccp_buf(r2, 0x21, 0x82, &(0x7f00000004c0)=""/126, &(0x7f00000002c0)=0x7e) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000000)={0x7, 0x7}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000340)={r4, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r1, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 496.674996][T30327] QAT: Invalid ioctl 03:35:10 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/dlm_plock\x00', 0x40, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000009580)={'vcan0\x00', 0x0}) accept4$packet(0xffffffffffffff9c, &(0x7f00000095c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000009600)=0x14, 0x800) sendmmsg$inet(r0, &(0x7f00000098c0)=[{{&(0x7f0000000d00)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001200)=[{&(0x7f0000000d40)="dddc95c8d4e00ab1ce764d1192533b8f484363dd9ba80d3115b85fec8d8c7f9a5eeef073001800cdb7a93a80bce824015eb98acd9c1b379eaa05a82ca67f2407c5ec85f4787bcd045d037aa803b12719a6a7513f8ac67b2fa25d1aa4d8d61e849ffabf01253ce6c057e2576073f8df6a01a609908f032df57e4b117c51c4c0862a356a5b63e41b75bd463a0df7", 0x8d}, {&(0x7f0000000e00)="56065ae54d4b6bc4b8c918f344c615e672a133f5fabafd2a42bba7394f43e10fe52c87cc542704ec76988992f7b23b00a59fec79ecf44684ba6679a2c63d35d53e0602ff3c7abfb2969dc82e09a4a6efd543b93aacb870d16a9e0c4efedf334c2ad94ec6ace5e0627f3834e6dfc3d026dc90e2c8030f6eb2864d39bca4f3789514348cd9", 0x84}, {&(0x7f0000000ec0)="9955fc7dfaa3b7579fd3605d6e608aeb1b44db9b655e2fee4064578cef1330fa387a9e0e57322b93dd98ceb133fde1c4ed38337a82bb8a2265231569df9bd07b33c3e3662264af2470b941d01d", 0x4d}, {&(0x7f0000000f40)="f57b67e4a2f5199973bba9a43724a0ded5650fb9034d952dbaef1c1b34da961ff1c63485abd2a712c253c47cffc8c947484e0d64c9747ed523f4388f74e8d5c4395aae862471c107fefb1a047194d74f2baff8d22ee04040aac7c0b4374c74e0e2361108b224c2ec28f8101d9b74e9ebbc27ad921fd9118a7e55a1eb357eec719ef11fa15f1bf9e2ebbb42767db15be63158215c01a6cd2862c4af000c4632594c1549503efd0499582244bbc68b647c4e171df7620be4880242d2a56e8599bec6e699ad373a03972c18b3bca9e7d7adcf", 0xd1}, {&(0x7f0000001040)="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", 0xfe}, {&(0x7f0000001140)="dbe0f36d70d2ed686257a9186de03ffcc1aa2a391fc4f84c6d4973e6701ca5b8629cb601e4ddab4eb75dbe9f98810f4cfd95092c34cd939e690e3fd746270b97b0cd3f12ce108b7ef6b006ebc24940b2a11db51850ee9b2fd54b5ee9338cf7c3a17f4f2e5925ade79914ff6cfd72f11cb64d5bd2ed19b953c5f6ca9187b2eb19179e0c51bd9b62558f0c5980ce7b174878940201509ef241ca8c50fdb7c80ba7db537b9a5e6c052bda596b3093b3f45f0089a79ddadb", 0xb6}], 0x6, &(0x7f0000001280)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8f5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x30}}, {{&(0x7f00000012c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001500)=[{&(0x7f0000001300)="60cc4787da3521bf2e3bed8532a3ce4382c8c9142d56e1ee50000add61fd4f14aa3290a58e10e347b099ce2ac00e69f57a50cf59e33d75040ee3b0bdccaeafe7509fc348880239cae2e6c9e90ceee91fd03f7ec795892fc05ba3bcfbf4d9469fa437b233acd5bd8fe31b3086984bffd93c183828d42571f35e459a47fa58c58aba7256a480dbddc02bb690af622a4af0", 0x90}, {&(0x7f00000013c0)="3c8345a80c2cc353c7d34a12a5ce9df3b35e47c0a47c0d8fce4d9d8ccc5779f9474174a27bab61b9560bc06edb07274036f2085b22ec46bd2c8d64ac6c43426639", 0x41}, {&(0x7f0000001440)="483ef71971dfef144724553e0f23639ff4df1f55af61577792cfdecb196b25776ad0a5cba0aff9cf902e5fd414adba802b4d2914edd428968cba0f48df2fe93c7a0454fb98c783741f88bd4333735b9e6e47c7e553f3c061bc952ac2ef4e91729ed10da4640b45bdf02efb3a80834b4788ea34149112599de757884e497175019477286ea6f79c3a6574048a9d977b270b074bddc13aece903465e089b", 0x9d}], 0x3}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001540)="e94da18fd0bb245d847d37d439aa39268eb46a2ab3f31ccaffbceebc1dbded60bbe981ef433ce44db522f3624ec58e600ac9b727bef385fbb153f6c9cff07aa298fb816b1f6bc187381f879bad135b2ff868dad1fa59fdd84722b451", 0x5c}, {&(0x7f00000015c0)="637345de52479c188dc422565b950be07768a03914c12fbd693d7c20d59010966cb1824f7030e695d596aaf3d76384e744d8f26c9532e5bd6b2e957b359774c5be17ee25c789cd859c99dce6b14821e0a8763225f07a4b6216af64070e93ce48508cf0ce9bc4f1e0f29c9d04f99ecdd940d3ee245ae2603d425e8b5c39750d9162436c81eafeb39f0f287f9234", 0x8d}, {&(0x7f0000001680)="aea04ac6e0bc2e3d19b7f47869780b12293fbf8a019336d70496ab4ea916161bae1df8b6970a218a7e41c2f23ce31c5bf6f23c64517a52b6645302f6b89f0387d76daad2a1c083bbabe33f52b4bdf1818a54e40f56cbf5a6b9a7861085adeb21003ae3fa", 0x64}, {&(0x7f0000001700)="a3e95c5e907bf9f3aea329502e648b6dafa25922ff757d52653dc59e90cec94bde55110aca6288595fa74ab2b3dee25f2271c8853cc5529e", 0x38}, {&(0x7f0000001740)="4e0e1bc8aadfdc160a4d6e83c43d3e509860479d5a26f45e36f09d22dd32f24c7b9a910acb34bebe687a2eef3f3a518866476d15cf89723a1204fceeb224f8b2e468616ba3bdf95dc1146fc9449879efcdbdb588413452ef180c87869f227f376c030da40efc7e3e12bc0c3985cbfd7624bfe6687971718d1393e7b140f1651cff204796bef9c753281eec7a23ba80b962b6a7c5055b0a018c097b261730ec094cda4ba902a000d5c9048a30c7722ece0ae43715c50d59435e", 0xb9}], 0x5, &(0x7f0000001880)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0x78, 0x0, 0x7, {[@cipso={0x86, 0x2c, 0x9, [{0x5, 0xd, "28679433c925321a3c5894"}, {0x7, 0xf, "336ab32126478dd40bad999478"}, {0x5, 0x4, 'ip'}, {0x6, 0x6, "be4f0cb6"}]}, @generic={0xcc, 0x4, "fc9e"}, @ssrr={0x89, 0xb, 0x9, [@multicast1, @rand_addr=0x40]}, @ra={0x94, 0x6, 0x1000}, @lsrr={0x83, 0x1b, 0x1, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0xd22b]}, @ssrr={0x89, 0xb, 0x100, [@empty, @remote]}]}}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001940)="62ef9a46ad62e76b4ea3fc4c5e396d5c338cdb2aaa955a25c3042e192e42309b153931ca9020d5952126b6fa917d56ea9ae53876b095645721bdb954648e6eddbc98070348b9965ec67f89b87a74598a36d9ff4812c97f68fd345a", 0x5b}, {&(0x7f00000019c0)="7895eaa16553dec54dbbc8df6ace320e034f42", 0x13}, {&(0x7f0000001a00)="2e95ed72b203a3eee0640304737dec9f49d7ea59d016e581290d78bce6f5350e0d8bb154007e21ba4121cbf8e84d58c7597cd3cab82a0aa9a10e4e8058a6677922015ad444fcf7d7cd7c1d5c9461672a728e778c199fef30821d86d58ff5c8513d8c90178905dfd7ed0643c9f8982e0c786a04ab77", 0x75}, {&(0x7f0000001a80)="780156a5a05d68bf44014d2a1f3a33aee9d724891d1d4327dd905ef1bf1c3c30f0da09cca3004ac13b0b99d80871812e3faab508ee3d5810e969fdd554b343696bb6a877092a08bb3ccb32d99110d8daf24362be4b0688f6700e5678c6eb0152cd535b2c9245da3c5537d2a2e64c1fab37b2e05c98dbe7fbc751dc3b7537b92591ec37377b521bd6c46bd8e0a3791f5b334f0d2396d91f433c", 0x99}, {&(0x7f0000001b40)="5e2d275e6e99c7b9ab398348", 0xc}], 0x5, &(0x7f0000009640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @local}}}], 0x58}}, {{&(0x7f00000096c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000009800)=[{&(0x7f0000009700)="ca18818becdc778451b33ccb0141a929735fafa98ac6bd902c07d80aa08e4b52ea3ac4bca662a615519551f12a6e58a319934367e8f0b6927cdd6bfffba9b8bd4905050ea4e51fcd0e144a76d43d33f3c13bc0fc16e59699f7edf5ab8bb3f0d3ee5677b2b4c40c351ff6cb9f4474ba289ccf48043151695cd77febe8c4ecdc05992eadd4f204a7a63f1fcf1a04b76647a3db727d4eed6d946af096d809c069a82744520ec81741cd1b1a29d91d0d76f50e4e27fcfb64031881e8654243d0564555a24d7fcfd4f763d59bbae492a9051f0c2cea8d65cd0652be66efc6933814", 0xdf}], 0x1, &(0x7f0000009840)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3ff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x800}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x960b}}], 0x78}}], 0x5, 0x40004) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x40096101, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x4, 0x5, 0x9, 0x200, 0x6, 0x78, 0xe1, 0x1, 0xe2, 0xb4, 0x9, 0xfffffffffffff800, 0x2, 0x0, 0x7]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000240)={r4, 0x8, 0x8000, 0xdb, 0x2, 0x3, 0x9, 0x45, {r5, @in={{0x2, 0x4e21, @loopback}}, 0x2, 0xfffffffffffffffa, 0x2, 0x7fff, 0x3}}, &(0x7f00000000c0)=0xb0) write$binfmt_aout(r3, &(0x7f0000000300)={{0x108, 0xfc00000, 0x80, 0x173, 0x399, 0x101, 0x2a5, 0x9}, "41e814a8623d9fdc952e85b51687a7f0fcc9b7da87b08020b9de4a9b6f2992cb39ecf86a7daefbfcf776a3f22ba5374a4c487f63e4337eb0f7df3f880397edf03e45cb6c32c477ae2dc086b6bef558ce482e778427bd7f86746cb3ca18091724d588fc682ae3c3606ce06597a9284e3f958aacbd71e1abd993784c43", [[], [], [], [], [], [], [], [], []]}, 0x99c) 03:35:10 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0xf3f, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000280)="0ef4e39da95c55b963", 0x9, 0x400}], 0x4001, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) r1 = shmget(0x1, 0x2000, 0x7800000c, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_RMID(r1, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000140)={0xd43, 0x6, 0x7, 0x10001, [], [], [], 0x9, 0x0, 0x7f, 0x4, "b0ef3ef689becdc84cdceeb327e03331"}) 03:35:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40c00, 0x0) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000140)={'vlan0\x00', 0xffffffff, 0x8001}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x40096101, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'\x00', &(0x7f0000000240)=@ethtool_rx_ntuple={0x35, {0xb, @hdata="854e3c3345c4f6c0c8d93062d69c62ed766ec4abce3c4b30dcca4b66d8d339250eba7112ebc0cd901a655848d743dc5049091cec9f0b5c7293fa36dade47213f7841b4e06dcc3eb7", @udp_ip4_spec={@empty, @remote, 0x4e21, 0x4e23, 0xfff}, 0x370e, 0x5, 0xb73, 0x2, 0xffffffffffffffff}}}) 03:35:10 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f00000003c0)}, &(0x7f0000000280)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:35:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000300)=""/230, 0xe6}], 0x2}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:35:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'eql\x00', 0x404001}) r2 = getpid() fcntl$setown(r0, 0x8, r2) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veam\x00', 0x40d}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000400)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) ioctl$TIOCNXCL(r4, 0x540d) r5 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x8, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xffffffffffff7265, @mcast1, 0x1}, {0xa, 0x4e22, 0x4, @loopback, 0x8}, r6, 0x6}}, 0x48) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x218140, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) accept4$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @broadcast}, &(0x7f00000001c0)=0x10, 0x4080000) connect$netlink(r5, &(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfc, 0x1}, 0xc) [ 497.186697][T30388] QAT: failed to copy from user cfg_data. [ 497.238354][T30389] QAT: failed to copy from user cfg_data. 03:35:10 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x0) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:35:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x20208000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x41) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000080)={0x1, 0x5, 0x2, 0x7f69}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x40096101, 0x0) [ 497.289561][T30426] QAT: failed to copy from user cfg_data. 03:35:10 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) ptrace$setregset(0x4205, r0, 0x201, &(0x7f0000000140)={&(0x7f0000000080)="23566b13029f5b7ccac089a35f56a8de9922676d6c155d024ffb1d39ee77b6f5144d6b9c20a881b9b517ea706473a86b9ecb06915df4c1383109eaef522e2f6f389e29eec3048edf69d00335e960c3df743c33325bec3c1faee39dd1a8366b816cfc52a8e5a72ece333e1c", 0x6b}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:35:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syzkaller1\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0x6c, 0x9, 0x3ff, 0x8, 0x7, 0x7, 0x6, 0x1ff}}) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f00000000c0)) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0xdb, 0x1, 0x9, 0x20, 0x18, 0xea1, 0x23e, 0xff, 0x7, 0x80000000}) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) 03:35:10 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x8000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, r3}}, 0x30) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:35:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) [ 497.552004][T30521] QAT: failed to copy from user cfg_data. 03:35:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=@v1={0x2, "f59012c76e4bb3c7faae0e925a7ce5ffd484"}, 0x13, 0x2) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) [ 497.631541][T30518] QAT: failed to copy from user cfg_data. [ 497.665233][T30569] QAT: Invalid ioctl 03:35:10 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) lseek(r1, 0x0, 0x5) 03:35:10 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = userfaultfd(0x80000) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) execveat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000040)='/dev/qat_adf_ctl\x00', &(0x7f0000000080)='/dev/qat_adf_ctl\x00', &(0x7f00000000c0)='-%\\:\x00', &(0x7f0000000140)='/dev/qat_adf_ctl\x00', &(0x7f0000000180)=':Y\x00', &(0x7f00000001c0)='eth1procppp0ppp1^vboxnet1lo\x00', &(0x7f0000000200)='/dev/qat_adf_ctl\x00'], &(0x7f00000003c0)=[&(0x7f0000000280)='-\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='/dev/qat_adf_ctl\x00', &(0x7f0000000340)='/dev/qat_adf_ctl\x00', &(0x7f0000000380)='/dev/qat_adf_ctl\x00'], 0x1000) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000400)={0x2, 0x5}) socket$inet_smc(0x2b, 0x1, 0x0) 03:35:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'veth1_to_team\x00', 0x40f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'vet\x00', 0x1c03}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) [ 497.785267][T30647] QAT: failed to copy from user cfg_data. [ 497.802196][T30645] QAT: failed to copy from user cfg_data. [ 497.825174][T30648] QAT: failed to copy from user cfg_data. [ 497.934359][T30656] QAT: failed to copy from user cfg_data. 03:35:11 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000300)=""/230, 0xe6}], 0x2}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:35:11 executing program 4: recvmmsg(0xffffffffffffff9c, &(0x7f0000004c40)=[{{&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000140)=""/212, 0xd4}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/173, 0xad}, {&(0x7f0000001300)=""/255, 0xff}, {&(0x7f0000000080)=""/13, 0xd}, {&(0x7f0000001400)=""/70, 0x46}, {&(0x7f0000001480)=""/251, 0xfb}, {&(0x7f0000001580)=""/200, 0xc8}, {&(0x7f0000001680)=""/231, 0xe7}], 0x9, &(0x7f0000001840)=""/123, 0x7b}, 0xfff}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000000c0)}, {&(0x7f00000018c0)=""/134, 0x86}, {&(0x7f0000001980)=""/124, 0x7c}], 0x3, &(0x7f0000001a40)=""/7, 0x7}, 0x20}, {{&(0x7f0000001a80)=@generic, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001b00)=""/250, 0xfa}, {&(0x7f0000001c00)=""/196, 0xc4}, {&(0x7f0000001d00)=""/124, 0x7c}], 0x3, &(0x7f0000001dc0)=""/107, 0x6b}, 0x9}, {{&(0x7f0000001e40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000003180)=[{&(0x7f0000001ec0)}, {&(0x7f0000001f00)=""/77, 0x4d}, {&(0x7f0000001f80)=""/25, 0x19}, {&(0x7f0000001fc0)=""/115, 0x73}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/133, 0x85}, {&(0x7f0000003100)=""/109, 0x6d}], 0x7, &(0x7f0000003200)=""/4096, 0x1000}, 0xfffffffffffffffa}, {{&(0x7f0000004200)=@generic, 0x80, &(0x7f0000004480)=[{&(0x7f0000004280)=""/59, 0x3b}, {&(0x7f00000042c0)=""/134, 0x86}, {&(0x7f0000004380)=""/218, 0xda}], 0x3, &(0x7f00000044c0)=""/217, 0xd9}, 0x8f89}, {{0x0, 0x0, &(0x7f00000046c0)=[{&(0x7f00000045c0)=""/61, 0x3d}, {&(0x7f0000004600)=""/170, 0xaa}], 0x2}, 0x3}, {{0x0, 0x0, &(0x7f0000004700), 0x0, &(0x7f0000004740)=""/47, 0x2f}, 0x8}, {{&(0x7f0000004780)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004800)=""/58, 0x3a}, {&(0x7f0000004840)=""/114, 0x72}, {&(0x7f00000048c0)=""/164, 0xa4}, {&(0x7f0000004980)=""/33, 0x21}, {&(0x7f00000049c0)=""/133, 0x85}, {&(0x7f0000004a80)=""/1, 0x1}, {&(0x7f0000004ac0)=""/146, 0x92}], 0x7, &(0x7f0000004c00)=""/32, 0x20}, 0x60cf}], 0x8, 0x40, &(0x7f0000004e40)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000004e80), &(0x7f0000004ec0)=0x4) socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) 03:35:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000000c0)={0x3, r2}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x40096101, 0x0) 03:35:11 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x4, {0x7fffffff, 0x9, 0x3, 0xb13, 0x0, 0x5}}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x200000, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000340)={r3, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r1, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 497.984566][T30656] QAT: Invalid ioctl [ 498.101074][T30712] QAT: failed to copy from user cfg_data. 03:35:11 executing program 3: ioctl(0xffffffffffffffff, 0x0, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x10080, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x24880, 0x0) r2 = getuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, r3) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) 03:35:11 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) fcntl$addseals(r1, 0x409, 0x5) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f0000000440)='\xd1?\xf3\xff\xfd3Q\xe1\xfd\xba\xde(\x92!\xdche8\xab\"\xf5m\x9b\xb3fy\xaa\x00\x10\x00\x00\x00\x00\x00\x00(\xea\a\xfaO4\xb2\xb4\xa3\xd06#\xbc\xe4f\xdb6\xdcm-\n\x8bz\x1b&_\xd4\x94\xab5\xb2\x05\xb0\xea\xd8\xba\x95\n\xe0\xa7\xef\xean\x87\xac\xf4P\xa6\f?\x962,\x84\xed\xa0', 0xfffffffffffffffc) 03:35:11 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) 03:35:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x2080) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x6800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa4, r2, 0x29, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xa50}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x31}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x60}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2c}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x70}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x800) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000280)) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x40096101, 0x0) [ 498.191502][T30729] QAT: failed to copy from user cfg_data. 03:35:11 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x400, 0x80400) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)={0x0, 0x8d3}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000003c0)={r1, 0x7}, &(0x7f0000000400)=0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000180)={'nlmon0\x00'}) fchmod(r2, 0x1ab) r4 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x9, 0x301400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xb, &(0x7f00000001c0)='syzkaller0\x00', 0xffffffffffffffff}, 0x30) write$P9_RGETLOCK(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="2d00000037020001ff0000bae2537cea9634c407fd543c61839a938f6c9df08b23ebd516e230f281b86a7e8f26764d0455dcdce7a39452569eeaa8537daacdac7490a3acf1496d420ad88ee48265da3dc97e23cc72bcd657d5678b472e10cb649add0129909fc315bdd0980d51180cc9226843fb5382d8de8373d3", @ANYRES32=r5, @ANYBLOB="0f00766574000000000000000000bd6800"], 0x2d) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$ASHMEM_PURGE_ALL_CACHES(r4, 0x770a, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000140)={'syzkaller0\x00', 0x200}) 03:35:11 executing program 2: r0 = add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x2000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r2, 0x0, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[], 0x0) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000280)="ae3b559e56ce8609a0162fc3ab975ab4508a4b98b68ea7072fc3cb562d431d316d9f7dff0950999228006830fa7619049e1420d7b4ed0d2e", 0x38, r0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000340)={r5, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r3, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 498.431834][T30792] QAT: failed to copy from user cfg_data. [ 498.452233][T30837] QAT: failed to copy from user cfg_data. 03:35:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000040)) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0xac000, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x40096100, 0x0) splice(r0, &(0x7f0000000180), r1, &(0x7f00000001c0), 0x3, 0x4) ioctl$CAPI_GET_FLAGS(r3, 0x80044323, &(0x7f0000000140)) 03:35:11 executing program 3: 03:35:12 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xe6}], 0x2}}], 0x1, 0x0, 0x0) 03:35:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x78efdd2021615088, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:35:12 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = semget$private(0x0, 0x2, 0x400) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/218) 03:35:12 executing program 3: 03:35:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth\x00\x00t\"\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) accept(r0, &(0x7f0000001b00)=@nfc_llcp, &(0x7f0000000240)=0xfffffffffffffee7) r3 = syz_open_dev$mice(&(0x7f0000001ac0)='/dev/input/mice\x00', 0x0, 0x400) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000005, 0x1013, r3, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x3, 0x2) r5 = fcntl$getown(r4, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r4, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0xd22, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x6, 0x5}, 0x0, 0x0, &(0x7f0000000340)={0x5, 0xa, 0xfffffffffffffffd, 0x80}, &(0x7f0000000380)=0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x100000000}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={r5, r4, 0x0, 0x9, &(0x7f0000000280)='veth\x00\x00t\"\x00', r6}, 0x30) sendmmsg$alg(r4, &(0x7f0000001a80)=[{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000540)="99a904d75387b1b1bbd007f55ca22388196260a67f02a37492f8a0a1f4c6d0862d756f4544", 0x25}, {&(0x7f0000000580)="b4bb235de0bb7c1b1b6bb7bf9b673d8dad2902b502b0e1fc5cc05e2ed2e89b8e854650ecdef53871232ecb995ff0f06413d16a43f19f10917999083370bc71de8707e0792cca4b3f640f29856b58cb1cc08e46186dd847e2761bf7d6f2dafcdc9255ff165956968411e68c67a6e02a79f9a2f1f462e73c80eae5948c0fe7fe1082c8806c901c75be4f3cd07e55acf714ef5538b5d87c8027d44d215bea42ea04961c658d2ebc3dec610e43046c3ca2138e5273afc42c53f4a29e8c89013d15546d8f0b1b9eeafadbd0d56f2e75c348b020dcc391ff6d7ffa363d72b1a41d424a47f82609caca6efebaeb00a2c2fcdb2e5b", 0xf1}, {&(0x7f0000000680)="85004e14d186a56a7e0ee726d96d356a1f1793434303cd45acd07a85027f1fbd3be1e40dbade80758f33758ea5b9f2241d45ac357f349fe1a2a5f43bdbb897a85c76cce6d90b2d58827d54ded4a6794793adf002c5601520c8087d4e2dd3ea926f207047f1c7215d8f248a4755f2edb7e03689a9f38eb9500a0126", 0x7b}, {&(0x7f0000000700)="4307b14d99fd021310c7487569d1f9b7d246abad66d1ea9c293b6cc2bc7d5f458e747d8905fb0e9a03859c51bb99ea82742be20c1d34906293f329d8ecc4df40bce4e994f1c25471", 0x48}, {&(0x7f0000000780)="87826a67a5ca8bb9609b8dc8f4437527bb5dedde96df8e0bcc1124b4eed16cec2c5e0fcb7b98583d61291d9243ddd45d7cd5d879dc56eda4f47006f13b0eb05f9e01f2630c60e0b3dfc5aad37b6a26c5f028f9475dd75b5efd932b51eedefefdf15366bd7093b82653e72ffeb3181e28b2031fb059a7e0ab786b45df830bf3695357af0be2adf44a80fee64839b2ad5b25f1e7d775476e0e64341e7834a559531ff9310a5131ca4eeb3b8bb2a986bcc4ccb1377058a8ef", 0xb7}, {&(0x7f0000000840)="e56a52bd8b38a690abcabf3521fde9bebd2ccead6fb738d97da363fbc4e6bb3fdf6af3cf99f8dea143853fbebb3ec8c86a0b", 0x32}, {&(0x7f0000000880)="de676d7c28309be2032aee9350883886cd26b47e19de56163a801802a8e0d9bac5e2007b0d58992c72f5e086725c81535d26cbdfb65f0270aa818b6160856d2719e3404e65043071d5bd88fd6ab39ec71647816bf4de6a84aae1e1d11435407bec02b19044d6bc240d07d367495f04", 0x6f}, {&(0x7f0000000900)="4595885379764559d96300c11c54c246a1744380029326a54e1e6d7165bc3c6afc4a18d76272ab1a762530df26ceef4482b338895e32f49994d06ceda430bb424ccb540ce06786a2a777224679522acea4fcb02a0e6cac33f8f66a321e15ef395a57f1637dc63513f7b11909345f312ce16b6362679197cacf98c959272fed0b17ad231cab8e72d7be043f801398a2752ccf176fd22ddcaf10b9322c94af9368afc36e15e77b188dd4e22209d84387f4aa23c75ce60864d47e1b16b9a7222f2fb4fa33e09f45dad9c6cb229c98ed1619a32a2445d37ff9b07d99fc640b0979d47d2bd0da2f137df2f2195ffda6c7a0020b60acb1c354189ba43543281bf8026f6d19350f617585a8949c5c8cd42c27c1c9232b68e18443577d8e52d22e088020556df0dbd93ff44fc2e0614a45c239124376276ec406661b2068613f90866cf037e5c0986a1111ba44674bd7146a21e33b93292c683e6519cdf965014477437e35616c43e235c09362f7a9825147c8f2590bb09844283ea058d73525fd9db288dced4d1156b21195b018d17b078255dff3ee236b8abaf3a6f63639e5da67b79ba63720493a2019183bc263b8e8587c44a0201b16054f3d4b723e34df9411e9179f74e2fc7ee4f12392aae9c3295f5a09ac575d2ea4860119b931bff23690ccb75d286ae2001248c21b88d01dd3e971e751a55b6cbc333d6b8542a1988374ed5481253f03c8fed5319d4d151ce3e1da03ea7b72cf3bd46a662f07f8dee03252f3a07f832ed88c05ceb9de13bff947ecc16fba71204daefd7d4d2d94ff125c0aba7d375492f36fe847ed359ea2ba7d891d817cbb7cbd7718e5218dc64f4377456678c4e6a2a2ae973f7dcdba825506bde5f378e26ed709da0eb2d0680e3f8eb1c53d71e3120bef42b5c589b65cf3ece1343c1476ac434a4ba6661c0676acc2c4a1ab48fb03d3105c9a1d187cb33704355c9857612fb6e753120ea5f581ced892d79b918398dc3a6235fd8c48683ec53ecb8203d6498e15aec1bb5b0410f2176b72b7d07409bd175dbf1df9b1d38bd805f88674983c10ddc1587b4db465cc675221aabfbb43e7d4c0114ea74b7adc0b6997774882250b2cd2544cb407bd3e12118efd1e5b111415ae303252a391ccf64bf51dc5c456aed23c8268b5431ec9721c6aec4095a133caa0ef96ad2a3bc7b25e161b2ae918e70c0a8d7c305eb99abdecf637b68b1df14220ad817e1a9b7b6a380e8aa42cc827e60515cdd09fe88ad5271352e354bcadcb589dee131badd179a0f43b65e0a819710a631d27c947e360dd191afcade1be5504900db1f31ae0cda50034d5746341382a2993831ac12b7b836abd049b4464767bb609b82847c897cbece24c2ac7c11adbbb0c32b14506f04e1ab9d0152dfc9fab5eda8dd60b9248f75e60da3cfec3b0bd53f557de8b3b4374ac2fa6bed25c29f5fd1bdf069dbd48abf241c5d5c193252032508386e08bc623090c59440009fd4f64ff3677301c991bbee55b4c0098152f6762f145d92198ada91d87a8c568f694570b39d216073a5a6d1048ac51d5713626323846aeafb507e03b5a2db116bc3da8da914d419a75c0d772a985c7f25ba84fb57a5cfacece5dd98e0dd205542db4bff3e0909930779696cec404a16aab49a6ca82132d09db341e2c90f8d31702b9f899bbc984c46c7e5e95d5786a58d73b261dd401369226331ec51b771711d977a8f74e056fc7e96076e39f73724d3f852d8671c668d67a5c095ec65e35b704cfa145c38fa532e8258a2f2f7d58774746117ae00382ce57e9a2a65cdd100f204bdb6c720a1690709f0c0391d574bab03c03a31161d475501f4783c55eb2fbf65a1dbf99ecc5a6c991a60ce3a3d216b8bf0ac003466a47870cd38e59640a17f5d44d6013c4d1b22790341db6c4b8a22a4f10a5bf9e9f7d5a5b042ccb8c9426958384ce7eb322ba194d7e28be8039dde9118a5ce24e8c54ac03bef5cdbb9adda08cdaa2590b28f01ac37b9f536380d790b01d7436ff590c4ce183d76366386b0b9ae053f5bedae068f1504815a8dfdf218f3528f7746441b063b51420f26aac7885bda537707da1cb34bdc2f1e49ffd17ee457897369045eefcb35a375b213da6dc7440a11f97e2766f986e3e6e78a7c267edc80e0a73050f014087dc113bae7cd754c36efbe45073581e771abf1f483a4ade5f8633369113db5c109ed53aea356645bbcb582a6b403d0293ad8c1fcdd7b1675070dff2b6f4e44b772110a072c1169997960fd9b23fe56cadcb5828bbd549caa43f9fff1426d4c0dbdc8820e298276aefab5d5be8294c9dca028c1fb946c8d307555f3ee8dd2259d86dbf8a362c4e10c1d3126b266f6ae91941ce53af0c08eecce8322dc19ec3e1034718cc776ce8bb56474d079466b9f2cb83b43ba9a132cd1899a36d90e7482daa76c7bf9c1dc96ac776390fd90287d55e9ae8e5c655c83a3702313e4bffa5c2ca95f738ccb2d6e22608316708dc85ca785ed9c6cc864ca7f753cf287316949b296612867a60ba01a89292cedf836d9615ff466913e9a3f529c4a58d0a83911d39ef32d1f8c0e2412c64f6fb1ff18abefc841022797062edb782342ea4c8499bc9f2e344239d78f72adf1611dadc7f137bf47a88e8b9d391799a19dd319be18cc98adb684806b0b63daf552f70b332d751b05043d11e9cca7c5080d3ac0871d06228b488151463876cf31a05087a842f3d7c40d542f5370e13083e5af23243f9437e4ce5488459680291b9e55552d2e197c700bbf7c67c8e7bf4e6cb61ef6be6be5717dad02d26014ccbbb5e86dd6671ec2bafa5a8ada8254c16038dbcddc07da31934c58552306a93432a22580e7a44152e15cfc97ccf4b1925623db3ea5f5c2dde9644d267669f9cb52eb0916566ddb1d246f2a80996e2f91df6d47f433882b70869f2e198a6482c994246583f41540f1d8e2fe8e7065bd963f53bea1ba5e4f658a54ec855e4a38fd61a16a51361b8da386a8a068b8a410634521b20db1c06ef8c2f2805bf0d96ff747e6a5189b959a788a924a392e50f3c71e5e6434c10437626ea3b7838645796d47aeb13e90a057eef488160c77bb3f84be6d1faedc5fb514e1cb397588fcea523e1f099d89ff0c59ca707ba924ffda7a191cd0b2912adbd20e8e3531f316c39d850cff5ae8d35e94a76d12199002d57ab0aa43ba9363fdfabb5e5d1f6bd69f95f8129fd26c6dabe716ce4d18d41fc52c671ecc01cf07e8b2efb8c3bb1382593672df6a36ddc2be0e2193fe605347f384023be98da9311537991e20f72745d59322dcfd60719971c9fed2f48aad2de4a5ed88d46fe020ce906565be2bfca2c640acafd1770e61d42cf1e71d514fddbf75eff8e2d3aaf8b1fecbee4eac08c33d39803329f8e72310635f54312a8b5365ba40289ede3a6f348d95aa2e586d41174336c04d8ce0a0cc7874963abdb251bdaca031fb45d85d4f761336b1fd9bea5930e5dc0ad7a0041efcbd6046c6aea0869bf01138c7b65687ba005f00e6b488cadfdd101813d01645e0d63b901efe9adbdb9abfcd7667eef5e9dd38ce584216d2172b0131fbfd874bb2080f8db0804d17137b9745c401f0a590b57b5682af6438d0cabc63e93fd87458ceaf253b83fb31a7a328ee60f549a82f8bdea6c0d06814bf49eaa9bfe4c7f3c031e398fb798c0745cc0e9ac9684bcb151647382781565227581319cc142173affd61fd8b10be352c6477de776cc14fbd814f1d83cb49a90260e91f39417615d65de66ee80a38650ca6c8376d8102a3a7028d7dbb9f0e2d09deb5bc82f37b611d7094389ebe1ae75696e57207db301646cd512b98f7eb4f2f5e0a93316165f0c62eb39f7a91ac4dae52a7d9cc981f0cd1ff4dbc47901e97de829529c45d40cf124c5a883f37b85fd92e4154d9280778b4949dbf16647808238a5bfe6e26cfcdea61f3453613819b90743aa01e5ba29c2d7d318516ad7a9f45328534dfb30e4a600131148b8289ee51ed9b6f05041baa72e6f3e118425798c6a49273d73443de5f9c9de846d3b5d2c5699da53d23d2b2af2e9f0304d20911ff586bd107371432e1e363600c375682c9361424d8c3fce46368c11d010d79e4b7fbcebebc3a2adf71518fbf60dbceddab3e4a66b86a56bdaee47eed862defcb97e99428b8f6f2dca27a07081ad973b41a82a3159ca3b21bc6732eb02541845b83f6686c7079bf5d083ddaa27b76b7612f2830ee3e2a1354cca47d6f984dcee5dde18c90c0ffb8725c262078479b05d8d7f71163543391ce64bc7aa2e5805f0b86a97bde3589f48fed4adf4b61782224b86575a1d6bb6635d11123f0d1107cb2816c8f0250126aaf498dc3f823b734068f666b4ceb264ab85acf1217d9144d59bb7205bf4f1b4a0c80be7712efb32e2323767208ebb62a3dbb985af63a5db5ccfdd6ab99a2b46f94babeac4f8341e92c9d96ae2fe2f7eca4f85d49f60f6070374d75a9fd54a13855a3128dfca10c4f1197e0ea2fa3f5d24a5b4ff8508fd8e07e2795d80a5b706e26ff828d7a670235259796746d90f4c217e2f9a22e99613bab0c2d9c6f29be2762093860a9d0e386a0c00bd4efd941c96cee574b6e7db51fb9c218377a2fb44fe9b2b3136579d0a2db8c9618ea21c3935f74e9a3dc0755b80fa79db39456dfa4af4ef8e509610067a5927c1b73a975a03b4d4e6678435cb74172c2f8a7034cbc2c6494b09e828d6e1b1539465b9a6f1f3c9e974a0b98424f128914803faa3bf56d04b547515f81641677fcc6eed75693fe911e7d9d7767bb41ad7f74d03fab7404afbedd9119bbf956413886b9e555408d01fc33b2fd0de13e5f12cb7de2e1424cb62971c578994ed214d8e4bf01705bbb3ca6f3a64ef89505b62a64c153f7d421e6f9383f3435abb5e7b54b053e2e330d458e85824c6024348e03777ba4a537a3fb4659be65efe3f4e12042753316928acaca4571b74ad83eac8eca8119f4113abe7e06bc3a3c92cae81c8eefd48671eede2190999359ac3ab520cec1e124a045d98bf1beb58b09d2825aa3403818eb7b226db91a5ae56beb9c0ad88bfd68c2a87927f0e1eefabde669b3a126d1269178d0d20448ec51633bfca1da074b52d17b62bf0f91a69e1b27099a87e4733c0a5a197f582cd1ae8cfacfe3db0c78cbd671497069ef05998c73a723214b9b95e15515d3afaea1867e7ac2d03ad6dc5ff49a1ad5e4676a31147094ca5fb6943da9ad1bd8414ad9b5e30a442a9823ca5b7cdc69b3b9d3596d2bc87c283340778e358fba41ff628cea02a99c934eedb99dc2fdcbf1de18d4359cb1cb2c335a73815a2001354c692ee617217a9b2da7166b7c459d58b6f67df65c601f96be7e86fc4e7c8ab6ce86852ababa60c016da6042ad61716babf7abc88f33d1399e6fc6a33c833f8baa8b2fe12615f02ec9dcfe5f7ae4a3831789fdd1962bf770fab1cdb6c5b10fc4966e96fea4700e912dc0eb1110443be4377e298f2cffc2158bfbdaeea25665069b16e76e9dc2b4bd3eeeb417eb49530e88c93d39542f66db678472190723cfbfe8ad3bcceb0f36afda248847b245e9d672322c0fa193a4092bd535fb9c832164d17ca9b9439d9524f9f9e2899abe525329a0dc4ddc6b071b196f7a5e5a1dfae741213b14bec947e10862fbeb82d53e97d3192e763053d2134d34330a2ac4ea0fb4db26b573ebc4969a264bc5de0059830ab4f27db83c0a5f4a2f277226a8ec90ff05ff12fc128a745812765b1e3565b2f5f2cc30e0926fabc55508935ff", 0x1000}, {&(0x7f0000001900)="df867cffd0d4748b53304fe5737d9893a107b03e617464293fcf390ea45aef8f4cec4d60042aab1f204a5eee1842f0670d0ab39c99c8c8d8102475d0ffe75cc7ddad7c5c9e22090e77d107b247bd256c54091f131202d680d6707af830da70c18d3ae9914e03a4f6764ed44c1705", 0x6e}], 0x9, &(0x7f0000001a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8084}], 0x1, 0x40000) 03:35:12 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) accept4$x25(r1, &(0x7f0000000100)={0x9, @remote}, &(0x7f0000000280)=0x12, 0x80000) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000)=0x4, 0x4) 03:35:12 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000080)=0xe8) r2 = syz_open_dev$dspn(&(0x7f0000000980)='/dev/dsp#\x00', 0x100, 0x0) r3 = dup(r2) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000009c0)={r3, 0x0, 0xfffff000}) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = geteuid() lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x649efd989ffb747a, &(0x7f00000006c0)=[r6]) getgroups(0x3, &(0x7f00000002c0)=[0xffffffffffffffff, 0x0, 0xee00]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair(0x5, 0x2, 0xb2a, &(0x7f00000000c0)={0xffffffffffffffff}) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000800)='nbd\x00') r12 = openat$null(0xffffffffffffff9c, &(0x7f0000000840)='/dev/null\x00', 0x101203, 0x0) r13 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000880)='/dev/vfio/vfio\x00', 0x1, 0x0) r14 = syz_open_dev$midi(&(0x7f00000008c0)='/dev/midi#\x00', 0x10000, 0x200000) r15 = syz_open_dev$cec(&(0x7f0000000900)='/dev/cec#\x00', 0x3, 0x2) r16 = fcntl$dupfd(r0, 0x406, r12) r17 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/autofs\x00', 0x0, 0x0) r18 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/hwrng\x00', 0x20004, 0x0) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000b40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2001a201}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x78, r11, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r12}, {0x8, 0x1, r13}, {0x8, 0x1, r14}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5000000000000000}, @NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8, 0x1, r15}, {0x8, 0x1, r16}, {0x8, 0x1, r17}, {0x8, 0x1, r18}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x400}]}, 0x78}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r19 = syz_open_dev$mice(&(0x7f0000000940)='/dev/input/mice\x00', 0x0, 0x100) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="7a000000202162045db8dfd8e92546446fd7eebc3e9e7d2eedda2152145cbaff6761f0da27fe1ce0fe98629156cd4b8eaec5e08c3e84c78e4972eca81390e4d10505c78aec16cb0c1a50b489600ce0c5ffe3403492002da55a46396ff58b8afd7b899c2dba16afab28df759bcc310ca400000000"], &(0x7f0000000580)=0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r19, 0x84, 0x1a, &(0x7f00000005c0)=ANY=[@ANYRES32=r20, @ANYBLOB="7b0000004e41204f3445775bf959a8f5c0f098fd3b50508f5d0992e69450951b8296d345ea95e9c80db51a1d4f0de89c696c5a2b03477c6cb0f3830a82a7426eead05b07cb5f0bd8a1bfba55e41e84ed8fb01b7c572b5ad93a9075c29a496dc4cc949a189f9a0bacad96d86c5f06972465e5facf120a66d17c8b6d457a73ff"], &(0x7f0000000680)=0x83) getgroups(0x7, &(0x7f00000003c0)=[0xee00, 0xee00, 0xee00, 0x0, 0xee01, 0xee00, 0x0]) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="02000000010004000000000002000200", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040005000000000008000700", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r9, @ANYBLOB="08000400", @ANYRES32=r21, @ANYBLOB="10000700000000002000040000000000"], 0x5c, 0x1) r22 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r22, 0x40096101, 0x0) 03:35:12 executing program 3: 03:35:12 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x7, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) ioctl$KDSETLED(r1, 0x4b32, 0xffffffffffffff0c) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$KDDISABIO(r1, 0x4b37) ioctl$TCSBRKP(r0, 0x5425, 0x17a) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000, 0x0) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)=',,\x00', 0xfffffffffffffffa) 03:35:12 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x2000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) 03:35:12 executing program 2: r0 = add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000580)={0x0, 0x3}, &(0x7f00000005c0)=0x8) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000009c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000800)={&(0x7f0000000700), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r3, 0x0, 0x70bd27, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000600)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x7, 0xbd7, 0x7, 0x7fff, 0x8}, &(0x7f00000006c0)=0x98) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x4000080000, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[], 0x0) write$P9_RREAD(r5, &(0x7f00000003c0)={0xc6, 0x75, 0x2, {0xbb, "7d5a4a3e509395e7341dfc5d62d559b17150f1015e1f266f6f4e957a0b530b0858f9199dac1aa595134c689927d8f6f1ed3eb775dbbd61003178717ecfc7996866425f066c5d43343cff5117f4b4efee6631f0f0a733ec9603e92bd3caca1b42684b9f406c5559a510d35159c3dd0c555254fb2efcc37413cb832b0d5f67e54a59aa09e10b2a32c821f6110dec01a819c5aaf48535f599ed212569b66f144aef5f7dae6eefd421fb2d843540c44d57bd6363e91480f9270417245b"}}, 0xc6) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000740), &(0x7f0000000840)=0x4) setxattr$trusted_overlay_opaque(&(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)='trusted.overlay.opaque\x00', &(0x7f0000000500)='y\x00', 0x2, 0x3) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000340)={r6, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r4, 0x5425, 0x17a) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:pam_var_run_t:s0\x00', 0x23, 0x1) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', r0) 03:35:12 executing program 3: [ 499.378299][T30965] QAT: failed to copy from user cfg_data. 03:35:12 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xe6}], 0x2}}], 0x1, 0x0, 0x0) 03:35:12 executing program 5: r0 = userfaultfd(0x80800) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) r1 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x80000, 0x0) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f00000001c0)={0xa, {0x9, 0x132, 0x6, 0x1}}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000700)={0xff, 0x1, 0x2, 0x0, 0x0, [{r2, 0x0, 0x105c5d50}, {r1, 0x0, 0x200000000003ff}]}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2080001}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc4, r4, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffffb}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x81}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x852}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000015}, 0x50) bind$isdn_base(r2, &(0x7f0000000200)={0x22, 0x0, 0x200, 0x46b7, 0x3}, 0x6) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x40096101, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, [], 0x12}, 0x10000}}}, &(0x7f0000000500)=0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000540)={r6, 0xd0, "63a1fd2560643f1dccb49c7dbb7b132d13ecbe89453354e10cad2fd1b6fa2ed1f1992f5b29db2237a15814d9d2916bd187131c43aad683a024027810da96696a9f1c36e1ce4e03df3753daf0560d2a1bdb71a47ff755147b60c3f415941f2e7975ba0ffda67ca97a13fe3281ef9fed2e9c727753ddc54b5413048031332854122006cb5d2984a5946e10d78b6e5e67c6d3f4df0bcb8cebacb6245418f0d5172f49e1b7e0a2a91fedbb92cc327167f0b23443b7f14df3167d852586ff425c3e5d16117282b673e6ffbeaf2187703d69c5"}, &(0x7f0000000640)=0xd8) 03:35:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x8000, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:35:12 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000900)={0x1, @tick=0x3, 0x9, {0x100, 0x2}, 0x2, 0x2, 0x8}) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) sendmsg$xdp(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000003c0)="0a3e38827ccae2b13211493289044d5d9cd98ba0254f04ad53cdc90dd215160884b2134e3411a2e15f1466e28876e01739f5c42e107f89d59f4b182b7a511fa5f14c8e1383a0251f68469bfbf6a6f383fa7fca622e5de5959c3f05c6b5934635eac6fc3da2c6dfba01aa39eda20c19abcc21ac0b8416e75e5c93cb0934947d6f7123f43a2ab847d1b2ead3d7e2d1860fc085ff33202155f2e9f298eea987c7316c4e37ad6ec7b8914f9b13431a63963f2d9da1907fa78d213775364f0e27be545a13f8d7d24eed2824c4e518f3a1cb78405073d0e4042d421ea16cb1baac8bfd01ba1a9dd703bb324bc327561d4417de", 0xf0}, {&(0x7f00000004c0)="6ba0ceaa81131c967db2416b85495b72e039645560fc8208369903b4761bde08039dbf332e51737e9e8b2e1420aef59c68ac7aa158a881ca8d82e5e0993492127b347e6a4ceb401f90145198d72947e2c6d72a4534ca24810ec56772450ea7bba25e73ffa3ced735701df2d477b93a4317b9ebc1497eb1bfffedb9ab6b909ec05b2d2f185efab15214a84e836da8a3f864a5445890a4cb89619f61eec9b468c1c15db6d8fd6b219080f8353c2b6b11fe364cffd599ec283c1968d9408d6ec7", 0xbf}, {&(0x7f0000000580)="cb519817e6357841ec16c49b7a9956a6e9793a402c4ce097f4993e0b0d0003b45bc329ce4309606986afb8c6df1b18b7170dee6c32b533d1ff56bf211d4250a4ec57df81cabb1415a07b8750bb57ac7c67bbe167ce95d607e99f201c4ad4105c119618e7f54f3a92c4ad89dd98b605d7e6c436eee88896173cc7351373d7ae36a00fefa5413d0e72e8ab048ad89979be733280750aae2cbf9b48dc55559157b40636d895cdd2eebf51587d834729386d402532b51709bf746a50705144db6867be99141747be921404c22f1ea4edf46ccf", 0xd1}, {&(0x7f0000000680)="6193da8b8866bd626dd109e42e19f7dbbdf703b3be06e016437c456183d64144061c8726ebb836ab36732c93329471d9f1eef1adaf0f2a546b0575ccb186524350d3d7855b98e3e547861e6d8e47d6cd0b36817414640b61ff472bbbfb2c7514a21beb32f096703dc6123c390c0af6e00420", 0x72}, {&(0x7f0000000700)="31c30e59cbb0175c7da67b940ed678abe0a825f14cd7540989f2569d1da4fdc63efa341521a65e4a39bbdccd0d43db5d3dedda51689a0a0428e2d75b9a4343a33ac9f02e10afb1f1d35ab3cc975b538ac6e3a64a443a4869f5459c0b87616d2a209137c835cabb0a67335a9e036bf173c8735b8c4ac7f8a06e76a534b695ee888bff66edad87e308174196e1d44177f59ef6c2301f2172d6", 0x98}, {&(0x7f00000007c0)="92f1a72b236090044533a8332a63e31c5ccbbc6b26031587d2e5dab86027a4187a763a7afa637271ee4e2d18547b132299f1dcab581aa0c914c632a4e50f810395647c2609c84186deac2b62c51eeba1576dd5e263de197423c1a5e194f99796a52213216e1b02823bfc5f3b0fa6f61f1c1e8938fb269f8be15f9c7c68f5948db00d50c38f707c22be48f2c0cd44c91fa37eb598970449083418d602217308ffe62d77ca8b1503ccf5691fb217f395148c8e6b4299635c", 0xb7}], 0x6, 0x0, 0x0, 0x80}, 0x20000080) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:35:12 executing program 3: 03:35:12 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x6c, r1, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x90}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) 03:35:13 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff567, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x17) 03:35:13 executing program 3: 03:35:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x800, 0x2) 03:35:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x200000) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:35:13 executing program 3: 03:35:13 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) [ 500.107335][T31001] QAT: failed to copy from user cfg_data. [ 500.256423][T31014] QAT: failed to copy from user cfg_data. 03:35:13 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xe6}], 0x2}}], 0x1, 0x0, 0x0) 03:35:13 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)=0x7) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:35:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xa000000000000, &(0x7f0000000080)="11dd00040000cf007be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:35:13 executing program 3: 03:35:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000140)={{0xa, 0x0, 0x37e5, 0x2c3, 'syz0\x00', 0x7}, 0x4, 0x40, 0xde, r2, 0x4, 0x8, 'syz0\x00', &(0x7f0000000080)=['@\x00', '/dev/qat_adf_ctl\x00', '#),\x00', '/dev/qat_adf_ctl\x00'], 0x28, [], [0xfffffffffffffff7, 0x101, 0x8]}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x40096100, 0x0) 03:35:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") accept(r0, &(0x7f00000001c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000140)=0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:35:14 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000100)=0x5) r2 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000340)={r3, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:35:14 executing program 3 (fault-call:4 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) [ 500.864566][T31030] QAT: failed to copy from user cfg_data. [ 500.910773][T31031] QAT: failed to copy from user cfg_data. 03:35:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x900000000000, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:35:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x6, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) [ 500.991269][T31038] QAT: failed to copy from user cfg_data. 03:35:14 executing program 2: add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:35:14 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) [ 501.094146][T31048] FAULT_INJECTION: forcing a failure. [ 501.094146][T31048] name failslab, interval 1, probability 0, space 0, times 0 [ 501.175057][T31048] CPU: 1 PID: 31048 Comm: syz-executor.3 Not tainted 5.2.0-rc3-next-20190607 #11 [ 501.184579][T31048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.194857][T31048] Call Trace: [ 501.198377][T31048] dump_stack+0x172/0x1f0 [ 501.202759][T31048] should_fail.cold+0xa/0x15 [ 501.207512][T31048] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 501.213533][T31048] ? ___might_sleep+0x163/0x280 [ 501.218450][T31048] __should_failslab+0x121/0x190 [ 501.223420][T31048] should_failslab+0x9/0x14 [ 501.223867][T31059] QAT: failed to copy from user cfg_data. [ 501.228043][T31048] __kmalloc+0x2d9/0x740 [ 501.228065][T31048] ? tomoyo_realpath_from_path+0xc0/0x7a0 [ 501.228082][T31048] ? rcu_read_lock_sched_held+0x110/0x130 [ 501.228094][T31048] ? tomoyo_realpath_from_path+0xcd/0x7a0 [ 501.228120][T31048] tomoyo_realpath_from_path+0xcd/0x7a0 [ 501.249965][T31048] ? tomoyo_path_number_perm+0x193/0x520 [ 501.250001][T31048] tomoyo_path_number_perm+0x1dd/0x520 [ 501.261749][T31048] ? tomoyo_path_number_perm+0x193/0x520 [ 501.261778][T31048] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 501.284820][T31048] ? __fget+0x384/0x560 [ 501.289104][T31048] ? ksys_dup3+0x3e0/0x3e0 [ 501.293729][T31048] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 501.293747][T31048] ? fput_many+0x12c/0x1a0 [ 501.293778][T31048] tomoyo_file_ioctl+0x23/0x30 [ 501.309412][T31048] security_file_ioctl+0x77/0xc0 [ 501.314585][T31048] ksys_ioctl+0x57/0xd0 [ 501.318914][T31048] __x64_sys_ioctl+0x73/0xb0 [ 501.323721][T31048] do_syscall_64+0xfd/0x680 [ 501.328368][T31048] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 501.328391][T31048] RIP: 0033:0x459279 [ 501.328408][T31048] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 501.328415][T31048] RSP: 002b:00007f15e8b7ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 501.328429][T31048] RAX: ffffffffffffffda RBX: 00007f15e8b7ac90 RCX: 0000000000459279 [ 501.328445][T31048] RDX: 0000000000000000 RSI: 0000000040096100 RDI: 0000000000000004 [ 501.359722][T31048] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 501.359762][T31048] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15e8b7b6d4 [ 501.359777][T31048] R13: 00000000004c3aef R14: 00000000004d7650 R15: 0000000000000005 [ 501.418456][T31055] QAT: failed to copy from user cfg_data. [ 501.460346][T31071] QAT: failed to copy from user cfg_data. [ 501.472191][T31048] ERROR: Out of memory at tomoyo_realpath_from_path. [ 501.508893][T31048] QAT: failed to copy from user cfg_data. 03:35:14 executing program 3 (fault-call:4 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) 03:35:14 executing program 1 (fault-call:7 fault-nth:0): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xe6}], 0x2}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:35:14 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x400102, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x200, 0xd5b}, &(0x7f0000000300)=0x90) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}}}, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000540)={r2, 0x1f, 0x9, 0x2, 0x100000000, 0xff, 0x3, 0x7, {r3, @in6={{0xa, 0x4e23, 0x0, @mcast2, 0x8}}, 0x8, 0x6, 0xc9, 0x0, 0xa859}}, &(0x7f0000000600)=0xb0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000100)='-$ppp0@userem1eth1\x00'}, 0x30) fcntl$setown(r0, 0x8, r4) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r6 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000640)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000340)={r7, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r5, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:35:14 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000080)=0x10000) accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14, 0x80000) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}, {0xa, 0x4e21, 0x40, @loopback, 0x40}, 0x2, [0x9, 0x10001, 0x3, 0x5, 0x7fffffff, 0x8, 0xff, 0x1007e1]}, 0x5c) 03:35:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000000)={0x8d, 0x96cc, 0xfffffffffffffff8}) 03:35:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) [ 501.784966][T31081] FAULT_INJECTION: forcing a failure. [ 501.784966][T31081] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 501.799049][T31081] CPU: 0 PID: 31081 Comm: syz-executor.3 Not tainted 5.2.0-rc3-next-20190607 #11 [ 501.808873][T31081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.819580][T31081] Call Trace: [ 501.823646][T31081] dump_stack+0x172/0x1f0 [ 501.828430][T31081] should_fail.cold+0xa/0x15 [ 501.833429][T31081] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 501.840719][T31081] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 501.846962][T31081] ? lock_downgrade+0x920/0x920 [ 501.851886][T31081] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 501.858565][T31081] should_fail_alloc_page+0x50/0x60 [ 501.864263][T31081] __alloc_pages_nodemask+0x1a1/0x8d0 [ 501.869858][T31081] ? is_bpf_text_address+0xd3/0x170 [ 501.875172][T31081] ? __alloc_pages_slowpath+0x2900/0x2900 [ 501.881703][T31081] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 501.894801][T31081] cache_grow_begin+0x9d/0x650 [ 501.900166][T31081] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 501.907211][T31081] __kmalloc+0x67a/0x740 [ 501.911925][T31081] ? tomoyo_realpath_from_path+0xcd/0x7a0 [ 501.918374][T31081] tomoyo_realpath_from_path+0xcd/0x7a0 [ 501.924430][T31081] ? tomoyo_path_number_perm+0x193/0x520 [ 501.931251][T31081] tomoyo_path_number_perm+0x1dd/0x520 [ 501.937222][T31081] ? tomoyo_path_number_perm+0x193/0x520 [ 501.943390][T31081] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 501.950354][T31081] ? __fget+0x384/0x560 [ 501.955137][T31081] ? ksys_dup3+0x3e0/0x3e0 [ 501.961812][T31081] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 501.968937][T31081] ? fput_many+0x12c/0x1a0 [ 501.973857][T31081] tomoyo_file_ioctl+0x23/0x30 [ 501.978761][T31081] security_file_ioctl+0x77/0xc0 [ 501.984160][T31081] ksys_ioctl+0x57/0xd0 [ 501.988955][T31081] __x64_sys_ioctl+0x73/0xb0 [ 501.994385][T31081] do_syscall_64+0xfd/0x680 [ 501.999937][T31081] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 502.006316][T31081] RIP: 0033:0x459279 [ 502.010553][T31081] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 502.031873][T31081] RSP: 002b:00007f15e8b7ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 502.040992][T31081] RAX: ffffffffffffffda RBX: 00007f15e8b7ac90 RCX: 0000000000459279 [ 502.049765][T31081] RDX: 0000000000000000 RSI: 0000000040096100 RDI: 0000000000000004 [ 502.058378][T31081] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 502.067598][T31081] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15e8b7b6d4 [ 502.075918][T31081] R13: 00000000004c3aef R14: 00000000004d7650 R15: 0000000000000005 03:35:15 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x40000, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000040)=0x7) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) [ 502.124662][T31087] QAT: failed to copy from user cfg_data. [ 502.153031][T31080] QAT: failed to copy from user cfg_data. 03:35:15 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x5, 0x30, 0x4, 0x1}, &(0x7f0000000280)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={r1, 0x54, &(0x7f00000003c0)=[@in6={0xa, 0x4e22, 0x6a, @remote, 0x100000001}, @in6={0xa, 0x4e23, 0x0, @remote, 0x1}, @in6={0xa, 0x4e21, 0x3, @mcast1, 0x5}]}, &(0x7f0000000440)=0x10) add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000340)={r4, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r2, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 502.172772][T31080] QAT: Invalid ioctl 03:35:15 executing program 5: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000400)='/proc/capi/capi20\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000440)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000480)=0x2c) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000004c0)={r1, 0x9}, &(0x7f0000000500)=0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x800800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000140)=""/134, &(0x7f0000000000)=0x86) ioctl$TIOCSSOFTCAR(r3, 0x40096101, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e22, 0xc246, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}}, 0x0, 0x1ff, 0x0, "63b39931295648ada5ba59adcded4f9259870c7741ff36685576f887a8969219ada3640a26531c41a5601f9b190e08dbf5d30439b865363f95708ddc33de8f81c0cd2d58a58298f4bd45d3b56a66e8e6"}, 0xd8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x6, 0x2, 0x200, 0x1, 0x6, 0x1f, 0xfff, 0x8001, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000300)={r4, @in6={{0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xfffffffffffffffd}}, 0x8, 0x1}, &(0x7f00000003c0)=0x90) [ 502.196837][T31097] QAT: failed to copy from user cfg_data. [ 502.212329][T31100] FAULT_INJECTION: forcing a failure. [ 502.212329][T31100] name failslab, interval 1, probability 0, space 0, times 0 [ 502.287785][T31100] CPU: 1 PID: 31100 Comm: syz-executor.1 Not tainted 5.2.0-rc3-next-20190607 #11 [ 502.297404][T31100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.307723][T31100] Call Trace: [ 502.311202][T31100] dump_stack+0x172/0x1f0 [ 502.315721][T31100] should_fail.cold+0xa/0x15 [ 502.320450][T31100] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 502.326475][T31100] ? ___might_sleep+0x163/0x280 [ 502.331058][T31104] QAT: failed to copy from user cfg_data. [ 502.332143][T31100] __should_failslab+0x121/0x190 [ 502.332183][T31100] should_failslab+0x9/0x14 [ 502.332204][T31100] __kmalloc+0x2d9/0x740 [ 502.352445][T31100] ? __local_bh_enable_ip+0x15a/0x270 [ 502.358402][T31100] ? lock_sock_nested+0xe2/0x120 [ 502.363377][T31100] ? __local_bh_enable_ip+0x15a/0x270 [ 502.369412][T31100] ? lockdep_hardirqs_on+0x418/0x5d0 [ 502.374733][T31100] ? lock_sock_nested+0x9a/0x120 [ 502.379788][T31100] ? sock_kmalloc+0xc6/0x120 [ 502.384592][T31100] sock_kmalloc+0xc6/0x120 [ 502.389156][T31100] af_alg_alloc_areq+0x24/0x1e0 [ 502.394330][T31100] skcipher_recvmsg+0x2dc/0x1110 [ 502.399748][T31100] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 502.405415][T31100] ? skcipher_bind+0x30/0x30 [ 502.410435][T31100] ? apparmor_socket_recvmsg+0x2a/0x30 [ 502.416336][T31100] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 502.423078][T31100] ? security_socket_recvmsg+0x95/0xc0 [ 502.428653][T31100] ? skcipher_bind+0x30/0x30 [ 502.433267][T31100] sock_recvmsg+0xce/0x110 [ 502.438412][T31100] ? __sock_recv_ts_and_drops+0x590/0x590 [ 502.444533][T31100] ___sys_recvmsg+0x271/0x5a0 [ 502.449452][T31100] ? aa_file_perm+0x40b/0xeb0 [ 502.454868][T31100] ? ___sys_sendmsg+0x920/0x920 [ 502.459902][T31100] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 502.466658][T31100] ? kasan_check_read+0x11/0x20 [ 502.471929][T31100] ? __fget+0x384/0x560 [ 502.476128][T31100] ? ksys_dup3+0x3e0/0x3e0 [ 502.480666][T31100] ? __lock_acquire+0x537/0x4af0 [ 502.485889][T31100] ? get_pid_task+0xc9/0x190 [ 502.491284][T31100] ? __fget_light+0x1a9/0x230 [ 502.496072][T31100] ? __fdget+0x1b/0x20 [ 502.500405][T31100] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 502.506788][T31100] do_recvmmsg+0x27e/0x7a0 [ 502.511786][T31100] ? ___sys_recvmsg+0x5a0/0x5a0 [ 502.516706][T31100] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 502.523647][T31100] ? _copy_from_user+0x12c/0x1a0 [ 502.529669][T31100] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 502.536288][T31100] __sys_recvmmsg+0xe5/0x270 [ 502.541594][T31100] ? __ia32_sys_recvmsg+0xb0/0xb0 [ 502.547015][T31100] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 502.553264][T31100] ? do_syscall_64+0x26/0x680 [ 502.559178][T31100] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 502.565879][T31100] ? do_syscall_64+0x26/0x680 [ 502.571612][T31100] __x64_sys_recvmmsg+0xe6/0x140 [ 502.576917][T31100] do_syscall_64+0xfd/0x680 [ 502.581829][T31100] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 502.588371][T31100] RIP: 0033:0x459279 [ 502.592546][T31100] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 502.612716][T31100] RSP: 002b:00007f1358132c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 502.621746][T31100] RAX: ffffffffffffffda RBX: 00007f1358132c90 RCX: 0000000000459279 [ 502.630124][T31100] RDX: 0000000000000001 RSI: 0000000020008a00 RDI: 0000000000000005 03:35:15 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @default, @rose={'rose', 0x0}, 0x186, 'syz1\x00', @bcast, 0x0, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) [ 502.639613][T31100] RBP: 000000000075bfc0 R08: 0000000020008bc0 R09: 0000000000000000 [ 502.648429][T31100] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f13581336d4 [ 502.657272][T31100] R13: 00000000004c65a5 R14: 00000000004db2f8 R15: 0000000000000006 [ 502.666665][T31081] QAT: failed to copy from user cfg_data. 03:35:15 executing program 3 (fault-call:4 fault-nth:2): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) 03:35:15 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x6, 0x80000000}, &(0x7f0000000280)=0xc) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000003c0)={r2, 0xfffffffffffffff8, 0xd4, "b458501e0de54aadb83f087158cd61935fb31a6bb43c4664b3a7d56a66e14c388856a750721a6ac72b12e307a79d69d238f692e6ff26801e123826a0e24357ad3cab1565c6076f4a8bdbfa7c4211a5ca25bfcae6b266da408adf32cf3d103e48fc2eb6bf76d365774dc7f5a833a613436c1f61b1b97cd2848211121b01610dcbaf85bcb711c7a1fe6389ea1f5c7cd294e6ff162c1810f1019273b01603610c3b10334da03e8546dfca28ac8c2ca59603c5b16fdf66564039e23b639f4c511c002fbc37989cdec363bff19a9d7207f32c1ef93e08"}, 0xdc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r3, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) fspick(r1, &(0x7f0000000000)='./file0\x00', 0x1) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 502.761963][T31116] QAT: failed to copy from user cfg_data. [ 502.795005][T31119] QAT: failed to copy from user cfg_data. 03:35:15 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) unlinkat(r0, &(0x7f0000000180)='./file0\x00', 0x200) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000000)={{0x1, @name="43a94bad34e06fe0827340d4415aab32ec5b025be5d22ffbf3b505a86867c1b5"}, "4d952a7f8c0fa7ab2ed5f05fb36bb29b4a181917f7ab917af28702746ee8edc4", 0x2898724da2ed9a63}) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) [ 502.831692][T31123] QAT: failed to copy from user cfg_data. [ 502.913119][T31127] FAULT_INJECTION: forcing a failure. [ 502.913119][T31127] name failslab, interval 1, probability 0, space 0, times 0 [ 502.976238][T31127] CPU: 1 PID: 31127 Comm: syz-executor.3 Not tainted 5.2.0-rc3-next-20190607 #11 [ 502.985562][T31127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.996999][T31127] Call Trace: [ 503.000419][T31127] dump_stack+0x172/0x1f0 [ 503.001381][T31136] QAT: Invalid ioctl [ 503.005274][T31127] should_fail.cold+0xa/0x15 [ 503.005300][T31127] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 503.005327][T31127] ? ___might_sleep+0x163/0x280 [ 503.027975][T31127] __should_failslab+0x121/0x190 [ 503.028913][T31136] QAT: failed to copy from user cfg_data. [ 503.033511][T31127] should_failslab+0x9/0x14 [ 503.033527][T31127] __kmalloc+0x2d9/0x740 [ 503.033546][T31127] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 503.033561][T31127] ? d_absolute_path+0x11b/0x170 [ 503.033580][T31127] ? __d_path+0x140/0x140 [ 503.049610][T31136] QAT: Invalid ioctl [ 503.055361][T31127] ? tomoyo_encode2.part.0+0xf5/0x400 [ 503.055382][T31127] tomoyo_encode2.part.0+0xf5/0x400 [ 503.055401][T31127] tomoyo_encode+0x2b/0x50 [ 503.055425][T31127] tomoyo_realpath_from_path+0x1d3/0x7a0 [ 503.061518][T31142] QAT: failed to copy from user cfg_data. [ 503.065543][T31127] tomoyo_path_number_perm+0x1dd/0x520 [ 503.065558][T31127] ? tomoyo_path_number_perm+0x193/0x520 [ 503.065577][T31127] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 503.065619][T31127] ? __fget+0x384/0x560 [ 503.097151][T31127] ? ksys_dup3+0x3e0/0x3e0 [ 503.115137][T31127] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 503.115157][T31127] ? fput_many+0x12c/0x1a0 [ 503.115182][T31127] tomoyo_file_ioctl+0x23/0x30 [ 503.140098][T31127] security_file_ioctl+0x77/0xc0 [ 503.145882][T31127] ksys_ioctl+0x57/0xd0 [ 503.145901][T31127] __x64_sys_ioctl+0x73/0xb0 [ 503.145925][T31127] do_syscall_64+0xfd/0x680 [ 503.159545][T31127] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 503.165859][T31127] RIP: 0033:0x459279 [ 503.165877][T31127] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 503.165885][T31127] RSP: 002b:00007f15e8b7ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 503.165900][T31127] RAX: ffffffffffffffda RBX: 00007f15e8b7ac90 RCX: 0000000000459279 [ 503.165909][T31127] RDX: 0000000000000000 RSI: 0000000040096100 RDI: 0000000000000004 [ 503.165918][T31127] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 03:35:16 executing program 1 (fault-call:7 fault-nth:1): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xe6}], 0x2}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:35:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x60000, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @empty}}}, &(0x7f0000000280)=0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000002c0)={r3, 0x2}, &(0x7f0000000300)=0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:35:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getpid() ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x3, 0x0, 0x2, 0x1}}) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xfffffffffffffff9}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000180)={r2, 0xe4, 0xae0}, 0x8) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x2) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000040)) recvfrom$ax25(r1, &(0x7f0000000140), 0x0, 0x10040, &(0x7f00000001c0)={{0x3, @bcast, 0x3}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 03:35:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000000)=""/29) fgetxattr(r1, &(0x7f0000000080)=@random={'btrfs.', '/dev/qat_adf_ctl\x00'}, &(0x7f0000000140)=""/230, 0xe6) [ 503.165926][T31127] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15e8b7b6d4 [ 503.165942][T31127] R13: 00000000004c3aef R14: 00000000004d7650 R15: 0000000000000005 [ 503.234639][T31147] QAT: failed to copy from user cfg_data. 03:35:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0xa0010000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x401, @remote, 0x4}}, 0x6, 0x8, 0xe512, 0x889, 0x2}, &(0x7f0000000000)=0x98) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={r2, 0x6458}, 0x8) 03:35:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) fcntl$getflags(r0, 0x402) [ 503.267616][T31127] ERROR: Out of memory at tomoyo_realpath_from_path. [ 503.284199][T31154] QAT: Invalid ioctl [ 503.300658][T31153] QAT: failed to copy from user cfg_data. 03:35:16 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x2000, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x57, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x0) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000300)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000440)={r3, 0x1d0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r1, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 503.325407][T31127] QAT: failed to copy from user cfg_data. 03:35:16 executing program 3 (fault-call:4 fault-nth:3): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) [ 503.395455][T31160] QAT: failed to copy from user cfg_data. 03:35:16 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) r3 = gettid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000100)=r3) ioctl$CAPI_NCCI_GETUNIT(r1, 0x80044327, &(0x7f0000000000)) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:35:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) [ 503.469247][T31160] QAT: failed to copy from user cfg_data. [ 503.491650][T31166] QAT: failed to copy from user cfg_data. [ 503.558235][T31175] QAT: failed to copy from user cfg_data. 03:35:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x4, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) getsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000140), &(0x7f0000000200)=0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x20400240840, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) r5 = semget$private(0x0, 0x2, 0x24) semctl$SETVAL(r5, 0x3, 0x10, &(0x7f0000000100)=0x3) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:35:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x80000008}) [ 503.619269][T31178] FAULT_INJECTION: forcing a failure. [ 503.619269][T31178] name failslab, interval 1, probability 0, space 0, times 0 [ 503.653704][T31182] QAT: failed to copy from user cfg_data. [ 503.713987][T31178] CPU: 0 PID: 31178 Comm: syz-executor.1 Not tainted 5.2.0-rc3-next-20190607 #11 [ 503.723870][T31178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.734131][T31178] Call Trace: [ 503.737556][T31178] dump_stack+0x172/0x1f0 [ 503.742300][T31178] should_fail.cold+0xa/0x15 [ 503.746972][T31178] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 503.753006][T31178] ? ___might_sleep+0x163/0x280 [ 503.758330][T31178] __should_failslab+0x121/0x190 [ 503.763645][T31178] should_failslab+0x9/0x14 [ 503.768205][T31178] __kmalloc+0x2d9/0x740 [ 503.772838][T31178] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 503.778669][T31178] ? iov_iter_advance+0x295/0xf70 [ 503.783882][T31178] ? sock_kmalloc+0xc6/0x120 [ 503.788638][T31178] sock_kmalloc+0xc6/0x120 [ 503.793302][T31178] af_alg_get_rsgl+0xd9/0x6b0 [ 503.798208][T31178] skcipher_recvmsg+0x323/0x1110 [ 503.803264][T31178] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 503.809457][T31178] ? skcipher_bind+0x30/0x30 [ 503.814077][T31178] ? apparmor_socket_recvmsg+0x2a/0x30 [ 503.820062][T31178] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 503.826588][T31178] ? security_socket_recvmsg+0x95/0xc0 [ 503.832092][T31178] ? skcipher_bind+0x30/0x30 [ 503.837045][T31178] sock_recvmsg+0xce/0x110 [ 503.841489][T31178] ? __sock_recv_ts_and_drops+0x590/0x590 [ 503.847645][T31178] ___sys_recvmsg+0x271/0x5a0 [ 503.852348][T31178] ? aa_file_perm+0x40b/0xeb0 [ 503.857233][T31178] ? ___sys_sendmsg+0x920/0x920 [ 503.862277][T31178] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 503.868805][T31178] ? kasan_check_read+0x11/0x20 [ 503.874037][T31178] ? __fget+0x384/0x560 [ 503.881269][T31178] ? ksys_dup3+0x3e0/0x3e0 [ 503.887619][T31178] ? __lock_acquire+0x537/0x4af0 [ 503.894176][T31178] ? get_pid_task+0xc9/0x190 [ 503.899030][T31178] ? __fget_light+0x1a9/0x230 [ 503.903750][T31178] ? __fdget+0x1b/0x20 [ 503.908150][T31178] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 503.914896][T31178] do_recvmmsg+0x27e/0x7a0 [ 503.919617][T31178] ? ___sys_recvmsg+0x5a0/0x5a0 [ 503.924533][T31178] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 503.931056][T31178] ? _copy_from_user+0x12c/0x1a0 [ 503.936546][T31178] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 503.943030][T31178] __sys_recvmmsg+0xe5/0x270 [ 503.947730][T31178] ? __ia32_sys_recvmsg+0xb0/0xb0 [ 503.952816][T31178] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 503.958653][T31178] ? do_syscall_64+0x26/0x680 [ 503.964170][T31178] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 503.970594][T31178] ? do_syscall_64+0x26/0x680 [ 503.975541][T31178] __x64_sys_recvmmsg+0xe6/0x140 [ 503.980753][T31178] do_syscall_64+0xfd/0x680 [ 503.985380][T31178] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 503.991508][T31178] RIP: 0033:0x459279 [ 503.995545][T31178] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 504.015797][T31178] RSP: 002b:00007f1358132c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 504.024669][T31178] RAX: ffffffffffffffda RBX: 00007f1358132c90 RCX: 0000000000459279 [ 504.032965][T31178] RDX: 0000000000000001 RSI: 0000000020008a00 RDI: 0000000000000005 [ 504.041303][T31178] RBP: 000000000075bfc0 R08: 0000000020008bc0 R09: 0000000000000000 [ 504.049440][T31178] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f13581336d4 [ 504.057970][T31178] R13: 00000000004c65a5 R14: 00000000004db2f8 R15: 0000000000000006 [ 504.081798][T31192] FAULT_INJECTION: forcing a failure. [ 504.081798][T31192] name failslab, interval 1, probability 0, space 0, times 0 [ 504.102061][T31192] CPU: 1 PID: 31192 Comm: syz-executor.3 Not tainted 5.2.0-rc3-next-20190607 #11 [ 504.111326][T31192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 504.122365][T31192] Call Trace: [ 504.125701][T31192] dump_stack+0x172/0x1f0 [ 504.130280][T31192] should_fail.cold+0xa/0x15 [ 504.135254][T31192] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 504.141635][T31192] ? ___might_sleep+0x163/0x280 [ 504.146728][T31192] __should_failslab+0x121/0x190 [ 504.151732][T31192] should_failslab+0x9/0x14 [ 504.156606][T31192] kmem_cache_alloc_trace+0x2ce/0x750 [ 504.162215][T31192] adf_ctl_alloc_resources+0x49/0x110 [ 504.167617][T31192] adf_ctl_ioctl+0x7ca/0xc92 [ 504.172426][T31192] ? adf_ctl_alloc_resources+0x110/0x110 [ 504.178501][T31192] ? adf_ctl_alloc_resources+0x110/0x110 [ 504.184259][T31192] do_vfs_ioctl+0xdb6/0x13e0 [ 504.189181][T31192] ? ioctl_preallocate+0x210/0x210 [ 504.194490][T31192] ? __fget+0x384/0x560 [ 504.198998][T31192] ? ksys_dup3+0x3e0/0x3e0 [ 504.203520][T31192] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 504.210414][T31192] ? fput_many+0x12c/0x1a0 [ 504.215047][T31192] ? tomoyo_file_ioctl+0x23/0x30 [ 504.220474][T31192] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 504.226836][T31192] ? security_file_ioctl+0x8d/0xc0 [ 504.232426][T31192] ksys_ioctl+0xab/0xd0 [ 504.237085][T31192] __x64_sys_ioctl+0x73/0xb0 [ 504.241794][T31192] do_syscall_64+0xfd/0x680 [ 504.246413][T31192] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 504.252490][T31192] RIP: 0033:0x459279 [ 504.256645][T31192] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 504.277908][T31192] RSP: 002b:00007f15e8b7ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 504.286828][T31192] RAX: ffffffffffffffda RBX: 00007f15e8b7ac90 RCX: 0000000000459279 [ 504.295148][T31192] RDX: 0000000000000000 RSI: 0000000040096100 RDI: 0000000000000004 [ 504.303398][T31192] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 504.311723][T31192] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15e8b7b6d4 [ 504.319934][T31192] R13: 00000000004c3aef R14: 00000000004d7650 R15: 0000000000000005 03:35:17 executing program 1 (fault-call:7 fault-nth:2): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xe6}], 0x2}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:35:17 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x4205000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r0, 0xeb) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) 03:35:17 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xc982, 0x0) connect$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x1, 0x4}}, 0x10) add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x100, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000340)={r3, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r1, 0x5425, 0x17a) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000280)={0x80, 0x7fff, 0x51, 0xfffffffffffffffc, 0x1a, 0xb34, 0x9, 0xbe4c, 0x200, 0x4}) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000300)) 03:35:17 executing program 3 (fault-call:4 fault-nth:4): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) 03:35:17 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8200, 0x45) getsockname$unix(r1, &(0x7f00000003c0), &(0x7f0000000100)=0x6e) r2 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000340)={r3, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 504.417347][T31195] QAT: failed to copy from user cfg_data. 03:35:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x100000000004, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) [ 504.499615][T31201] QAT: failed to copy from user cfg_data. 03:35:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000140)={0x8, 0x10001, 0x8, 0x0, 0x0, [{r1, 0x0, 0x7}, {r0, 0x0, 0x7}, {r1, 0x0, 0x5}, {r0, 0x0, 0x80bd}, {r1, 0x0, 0x3}, {r0, 0x0, 0x3}, {r0, 0x0, 0x7}, {r0, 0x0, 0x4}]}) [ 504.578927][T31208] FAULT_INJECTION: forcing a failure. [ 504.578927][T31208] name failslab, interval 1, probability 0, space 0, times 0 [ 504.614687][T31215] QAT: failed to copy from user cfg_data. [ 504.664215][T31208] CPU: 0 PID: 31208 Comm: syz-executor.1 Not tainted 5.2.0-rc3-next-20190607 #11 [ 504.673642][T31208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 504.684035][T31208] Call Trace: [ 504.687657][T31208] dump_stack+0x172/0x1f0 [ 504.692543][T31208] should_fail.cold+0xa/0x15 [ 504.697175][T31208] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 504.703049][T31208] ? ___might_sleep+0x163/0x280 [ 504.706250][T31224] QAT: failed to copy from user cfg_data. [ 504.708405][T31208] __should_failslab+0x121/0x190 [ 504.708422][T31208] should_failslab+0x9/0x14 [ 504.708434][T31208] __kmalloc+0x2d9/0x740 [ 504.708451][T31208] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 504.708476][T31208] ? af_alg_get_rsgl+0x4f8/0x6b0 [ 504.708497][T31208] ? sock_kmalloc+0xc6/0x120 [ 504.708517][T31208] sock_kmalloc+0xc6/0x120 [ 504.708540][T31208] skcipher_recvmsg+0x46f/0x1110 [ 504.753727][T31208] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 504.759681][T31208] ? skcipher_bind+0x30/0x30 [ 504.759698][T31208] ? apparmor_socket_recvmsg+0x2a/0x30 [ 504.759715][T31208] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 504.759732][T31208] ? security_socket_recvmsg+0x95/0xc0 [ 504.759746][T31208] ? skcipher_bind+0x30/0x30 [ 504.759763][T31208] sock_recvmsg+0xce/0x110 [ 504.759778][T31208] ? __sock_recv_ts_and_drops+0x590/0x590 [ 504.759792][T31208] ___sys_recvmsg+0x271/0x5a0 [ 504.759804][T31208] ? aa_file_perm+0x40b/0xeb0 [ 504.759824][T31208] ? ___sys_sendmsg+0x920/0x920 03:35:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) 03:35:17 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000000)={0x5, 0x24b2, 0x2, 0x9}) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) [ 504.778247][T31224] QAT: failed to copy from user cfg_data. [ 504.782543][T31208] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 504.782566][T31208] ? kasan_check_read+0x11/0x20 [ 504.782588][T31208] ? __fget+0x384/0x560 [ 504.792424][T31208] ? ksys_dup3+0x3e0/0x3e0 [ 504.792441][T31208] ? __lock_acquire+0x537/0x4af0 [ 504.792465][T31208] ? get_pid_task+0xc9/0x190 [ 504.858798][T31208] ? __fget_light+0x1a9/0x230 [ 504.863765][T31208] ? __fdget+0x1b/0x20 [ 504.868133][T31208] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 504.874871][T31208] do_recvmmsg+0x27e/0x7a0 [ 504.879336][T31208] ? ___sys_recvmsg+0x5a0/0x5a0 [ 504.884228][T31208] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 504.890903][T31208] ? _copy_from_user+0x12c/0x1a0 [ 504.895999][T31208] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 504.896024][T31208] __sys_recvmmsg+0xe5/0x270 [ 504.896042][T31208] ? __ia32_sys_recvmsg+0xb0/0xb0 [ 504.896066][T31208] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 504.917897][T31208] ? do_syscall_64+0x26/0x680 [ 504.922619][T31208] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 504.929050][T31208] ? do_syscall_64+0x26/0x680 [ 504.933973][T31208] __x64_sys_recvmmsg+0xe6/0x140 [ 504.939045][T31208] do_syscall_64+0xfd/0x680 [ 504.943716][T31208] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 504.949903][T31208] RIP: 0033:0x459279 03:35:18 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000000)) [ 504.954088][T31208] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 504.974330][T31208] RSP: 002b:00007f1358153c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 504.974346][T31208] RAX: ffffffffffffffda RBX: 00007f1358153c90 RCX: 0000000000459279 [ 504.974355][T31208] RDX: 0000000000000001 RSI: 0000000020008a00 RDI: 0000000000000005 [ 504.974365][T31208] RBP: 000000000075bf20 R08: 0000000020008bc0 R09: 0000000000000000 [ 504.974374][T31208] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f13581546d4 [ 504.974383][T31208] R13: 00000000004c65a5 R14: 00000000004db2f8 R15: 0000000000000006 [ 504.999917][T31271] QAT: failed to copy from user cfg_data. [ 505.075224][T31232] QAT: failed to copy from user cfg_data. 03:35:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x2, 0x230400) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x7f}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={r3, 0x1}, 0x8) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:35:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10000, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) [ 505.115918][T31345] QAT: failed to copy from user cfg_data. [ 505.198222][T31349] QAT: failed to copy from user cfg_data. 03:35:18 executing program 1 (fault-call:7 fault-nth:3): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xe6}], 0x2}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:35:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=0x0) capget(&(0x7f0000000080)={0x20080522, r2}, &(0x7f00000000c0)={0xffffffff, 0xfff, 0x8, 0xebc2, 0x3ad94d15, 0x6}) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:35:18 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000001500)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="eb886b13fdd884a018c19b1611976470f6c4e2c297a437a62c5b1f968f5e2f1624449a5131b1967bf1368a8dedf2930f3af689a9cb90e6875f9acb1e7f83fa1e5b2c41edd5d1a7132ed9b1c2b566cb48eede25fec4d6d4daf7bff23921bc242c3187dcf28ac37d15d03f3befb53350a279725fb9bc31ec78b8f5ac39cb545a510100b5158530887e5a0e0f00b52a6d6877905539d387bd86affa576f04a9cd35", 0xa0}, {&(0x7f0000000100)="031221d214d9e18d3f22844ef1aca6e542fcbadf43e709c68e222e999bef18983cc8ae5c0ade07d195885c156a6fcab3606734e9c9d39060605979ac2705b1d4e518438b93f93e854f3b00df564f2d4109894099772617205ad5a44fe1c21bc92434c7d2eb52a63c2612adab6bdca92f2202ba7b97ae9d9ac90a38c790c9201106a50a00c9dc5cb450206ed3fa27194f036ded04f227f88d", 0x98}], 0x2}, {0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000000200)="a0989173b17ffe9757634476b29c1df6aab4b5e5ea3b13bb7ba60f4db0351f3f2bbef427ba7fefd600450bff535f0a029cccc5ef3d9185ee3fe11ccdbc4fddc31751ecc4bbfcba8a861cb2f9c829a1c8d5842b781798929e588636abd400220e21569ed31cb693edc0cf9eb8b12f282f", 0x70}, {&(0x7f0000001300)="5ef291a87fb9bc20141d6540cb850a6a293c40693f53f844e60c96f04b6c49e6cfd35d973f1e735fa75a1697597586c939ee30ca80c22000fd545cfbc38d067b03887c422da0c8207d8316626926ee869800ed1e739b3ad28c5a2ac437e8534a09d59d0b06fa87d6a0a04996b446a2e9015514178e07c641fd132bf2a3a210916b597f36e3d2fce2129682cafaca377b8e2c900d7409af766c3ebdabe1bd55b5766207df2cdbd4ca8dc3f28156f2c770bcebc37a0f303d82aa17d476533543004fdc6333f1d5dd7e0cb68adfa08815abf970cdeb2d25b0cc", 0xd8}, {&(0x7f0000001400)="f72fe8bd190d5cb3501cf384a8244e12a4a38e9a58a00709da078e237b87577ed26f56562e59a378cfb46418906ed0c0f909abdf1ba00c37294ba83c38b4e2afdac66049643d92adb55311f2852493ef62b96c132bdccfcbbf8d72b005667a6bc314fdf626b36b436a14059d05a9dc8892fa5e557b68b9a04ec23ad252d5cfce575dfa67a7344927b3e046d2f24c037845ab244ffb66f5a189ab822c2be9c0a7591a0754e0dbb46644723b82ef2344786a9b1aec81270a30f28bfbdfffbf29b10150846516c7e4cf865e1b801dfd21782cd2fe508747ac86be32a1f6f875799b980a7fd6618ce7401290d71be0427ea43803bf8410fc43f30d", 0xf9}], 0x4, 0x0, 0x0, 0x800}], 0x2, 0x80) socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x4203ff, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) 03:35:18 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$TIOCEXCL(r0, 0x540c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:35:18 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) [ 505.392981][T31458] QAT: Invalid ioctl 03:35:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) 03:35:18 executing program 2: r0 = add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x40000, 0x0) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) ioctl$CAPI_GET_ERRCODE(r2, 0x80024321, &(0x7f0000000280)) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000300)={r0, 0x90, 0xc6}, &(0x7f0000000480)={'enc=', 'pkcs1', ' hash=', {'sm3-generic\x00'}}, &(0x7f0000000500)="0e971394764de13749b815c69a6d3db17b61760ca51dea0c5ca9ac897e605db555efe256d87f00c9f00256c3d94dcf51155f7089434ea5728d47cfb8962ce14d6f57615cf6f5383e52734de67a0efe60ae847aebe21530e05946abece76c2ade43a1b641365566427905889b92e1e378bc5acb090a7e64e367d0a48aca216fdfc4cad9f19088af6c9c5b8ed6b13aefb3", &(0x7f00000005c0)="a0a0a6f79fda0a3ab7fa6cfdde7578b194cd22de88cc4227e9bb8395da787a374347550ba53ab4d9e851bd3b782fdbf1752c7ada83805451c9e8ade717e24da620c82bb9b818bf15f4cdf3b38c007deb5789303c9082cf2af2101b2f24232f3382660c05db0e61e03cc3e56445c31ffd06a9ff765282b9c6e091f3f5fa6e09d1d47da951d60dd0286915d7f805cbf024b48f5d85205456bcd3d694ce069f31396f4dce117ddcfde7b948cd87642f62a8c8b8547df7aa4734edc9843c15d71aaf52c25baa0b53") write$P9_RVERSION(r2, &(0x7f0000000700)=ANY=[], 0xfffffffffffffd7c) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000340)={r3, 0x94, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0x8, @ipv4={[], [], @empty}}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e22, 0x81, @ipv4={[], [], @rand_addr=0x6}, 0x8}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2b}}, @in6={0xa, 0x4e22, 0x9, @empty, 0x4e}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000003c0)={r4, 0x4, 0xffffffffffffff80, 0x2, 0x0, 0x4, 0x7, 0xd9, {r3, @in6={{0xa, 0x4e24, 0x1000, @mcast1, 0x4}}, 0xffff, 0x1ff, 0x400, 0x238ebe8d, 0x800}}, &(0x7f0000000100)=0xb0) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000740)) ioctl$TCSBRKP(r1, 0x5425, 0x17a) sendto$netrom(r2, &(0x7f0000000840)="0eb4fc52022b2febd7e6670e6a7dd54992467b1ec20d21497179f867bfd91ca1154aadeaae259fa492f3c468c97c1151ed042fd917b8b25eef9472051da22d220b373f7a42c5889c3333a53e91d9bce4f5d3c01d6c421b03d198c3c6a064616fa09e5fb1e31b515b1a00770e2a4846f31781cbdad93c578b6b02b3b7808577d2b76f47e08b423fe7aad24b364a27571225711b0d2f6e18cb3a1d4e519229535ca8db1fbef93ae673f273ebbc3fdffd8095f0538ae734b7d707db0f11c5c5e905624d3cc724d210fbd5e6783d4e52f7766647038a22a3ce053fccd22af3d07b81b8e4a58d6ed2fedbb97295a35d759fb2ca94534e48c8b4", 0xf7, 0x4010, &(0x7f00000006c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x4}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @null, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) ioctl$CAPI_INSTALLED(r2, 0x80024322) 03:35:18 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) [ 505.423930][T31458] QAT: failed to copy from user cfg_data. [ 505.447850][T31470] QAT: Invalid ioctl [ 505.452429][T31470] QAT: failed to copy from user cfg_data. [ 505.521586][T31480] FAULT_INJECTION: forcing a failure. [ 505.521586][T31480] name failslab, interval 1, probability 0, space 0, times 0 [ 505.587741][T31480] CPU: 1 PID: 31480 Comm: syz-executor.1 Not tainted 5.2.0-rc3-next-20190607 #11 [ 505.596903][T31480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 505.606979][T31480] Call Trace: [ 505.610293][T31480] dump_stack+0x172/0x1f0 [ 505.614645][T31480] should_fail.cold+0xa/0x15 [ 505.619261][T31480] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 505.625093][T31480] ? ___might_sleep+0x163/0x280 [ 505.630032][T31480] __should_failslab+0x121/0x190 [ 505.632678][T31487] QAT: failed to copy from user cfg_data. [ 505.634984][T31480] should_failslab+0x9/0x14 [ 505.635001][T31480] __kmalloc+0x2d9/0x740 [ 505.635014][T31480] ? save_stack+0x5c/0x90 [ 505.635040][T31480] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 505.660181][T31480] ? skcipher_walk_next+0x529/0x16b0 [ 505.665487][T31480] ? __kmalloc+0x15c/0x740 [ 505.669921][T31480] ? skcipher_walk_next+0x753/0x16b0 [ 505.675227][T31480] skcipher_walk_next+0x753/0x16b0 [ 505.680366][T31480] skcipher_walk_done+0x409/0xd50 [ 505.683749][T31491] QAT: failed to copy from user cfg_data. [ 505.685420][T31480] glue_ecb_req_128bit+0x2d1/0x400 [ 505.685446][T31480] ? glue_cbc_decrypt_req_128bit+0x640/0x640 [ 505.685485][T31480] ecb_decrypt+0x1d/0x30 [ 505.706512][T31480] skcipher_recvmsg+0xc29/0x1110 [ 505.711467][T31480] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 505.717122][T31480] ? skcipher_bind+0x30/0x30 [ 505.721763][T31480] ? apparmor_socket_recvmsg+0x2a/0x30 [ 505.727238][T31480] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 505.728707][T31496] QAT: failed to copy from user cfg_data. [ 505.733491][T31480] ? security_socket_recvmsg+0x95/0xc0 [ 505.733511][T31480] ? skcipher_bind+0x30/0x30 [ 505.733530][T31480] sock_recvmsg+0xce/0x110 [ 505.733545][T31480] ? __sock_recv_ts_and_drops+0x590/0x590 [ 505.733568][T31480] ___sys_recvmsg+0x271/0x5a0 [ 505.764103][T31480] ? aa_file_perm+0x40b/0xeb0 [ 505.768804][T31480] ? ___sys_sendmsg+0x920/0x920 [ 505.773673][T31480] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 505.779929][T31480] ? kasan_check_read+0x11/0x20 [ 505.784801][T31480] ? __fget+0x384/0x560 [ 505.788976][T31480] ? ksys_dup3+0x3e0/0x3e0 [ 505.788993][T31480] ? __lock_acquire+0x537/0x4af0 [ 505.789012][T31480] ? get_pid_task+0xc9/0x190 [ 505.789031][T31480] ? __fget_light+0x1a9/0x230 [ 505.798371][T31480] ? __fdget+0x1b/0x20 [ 505.798390][T31480] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 505.798411][T31480] do_recvmmsg+0x27e/0x7a0 [ 505.798431][T31480] ? ___sys_recvmsg+0x5a0/0x5a0 [ 505.798454][T31480] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 03:35:18 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) 03:35:18 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2c0400, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000040)={0x7, 0x4d, 0x1}, 0x7) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) [ 505.833129][T31502] QAT: failed to copy from user cfg_data. [ 505.833492][T31480] ? _copy_from_user+0x12c/0x1a0 [ 505.833525][T31480] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 505.833551][T31480] __sys_recvmmsg+0xe5/0x270 [ 505.861261][T31480] ? __ia32_sys_recvmsg+0xb0/0xb0 [ 505.866296][T31480] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 505.871753][T31480] ? do_syscall_64+0x26/0x680 [ 505.876425][T31480] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 505.882496][T31480] ? do_syscall_64+0x26/0x680 [ 505.887205][T31480] __x64_sys_recvmmsg+0xe6/0x140 [ 505.893659][T31480] do_syscall_64+0xfd/0x680 [ 505.898181][T31480] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 505.904177][T31480] RIP: 0033:0x459279 [ 505.908078][T31480] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 505.927712][T31480] RSP: 002b:00007f1358132c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 505.936140][T31480] RAX: ffffffffffffffda RBX: 00007f1358132c90 RCX: 0000000000459279 [ 505.944102][T31480] RDX: 0000000000000001 RSI: 0000000020008a00 RDI: 0000000000000005 [ 505.952062][T31480] RBP: 000000000075bfc0 R08: 0000000020008bc0 R09: 0000000000000000 [ 505.960140][T31480] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f13581336d4 [ 505.968116][T31480] R13: 00000000004c65a5 R14: 00000000004db2f8 R15: 0000000000000006 03:35:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00%\xc9n\xfc\x00\x00\x00\xbdh\x00', 0x5110}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x101002, 0x0) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000240)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) r4 = dup3(r1, r1, 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000001c0)={0x0, 0x1, 0x12, 0x40, 0x10000, 0xec75}) 03:35:19 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000000)) [ 506.105198][T31610] QAT: failed to copy from user cfg_data. 03:35:19 executing program 1 (fault-call:7 fault-nth:4): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xe6}], 0x2}}], 0x1, 0x0, &(0x7f0000008bc0)) 03:35:19 executing program 2: add_key(&(0x7f0000000100)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r3, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xfb, 0x6, 0xa5, 0x90}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4894}, 0x8001) signalfd4(r1, &(0x7f0000000000)={0x8}, 0x8, 0x80000) 03:35:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000080)={0x9, 0x3, 0x1, 0x100000001, &(0x7f0000000140)=[{}, {}, {}]}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x40096100, 0x0) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000240)) socket$inet_dccp(0x2, 0x6, 0x0) syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0xef, 0x20000) 03:35:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008952, &(0x7f0000000000)) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'team_slave_1\x00'}}) ioctl$TIOCSSOFTCAR(r1, 0x40096101, 0x0) 03:35:19 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40, 0x110) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000200)={0xa, 0x0, 0x7, 0x57e3}, 0xa) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000002c0)='./file0\x00', 0x9, 0x4, &(0x7f0000000700)=[{&(0x7f0000000300)="fb16c8006c06562af5923048880034cbf4412e9b5a4c0c8324ad787bce6ead7c4baa82693e261dc04b19f9947ceefbf05cae315a6ad38a692cc017e73a61f3d846d39639934c4f6af83b8f30b358380bd03b9af56dbb39b3954475122676d20f63590fd7c1a523adc843b70fca1f15d6fb26cca12491290678f95eaf4dee46ad31c521e7ef9a821a525824474ef1c46bfec5c785f9137694eba497e65ccc123a9a4d1efea9aaf20f9965a6f22b522de91690e53f483e69e388f58c3a10f06d91d46521", 0xc3}, {&(0x7f0000000400)="e462563f182a58338d448d1de5700b9c473c5d6dd90c61c69578fa9a6e05d2bf4e7c45c2b325721ae22fb8132fffc558a4a764698df4737775c59d19919f291c76bf3f59e54c42d17754e7ac19e702107373c62c38388a78522ade4d595e5d2e28a886c258416890c29afd74f4f4f322cc9d0b0f5893b8d6dffde7c51d32e865bb71a8a669412f8a54da15ae11a41896abbbed2a1736391cb983ceff0a09ad055c59e0013968e5d428690953cc8cda8d4eac138a9207ee4833ecdb71c965763be5adfd81a67febc951645c52059a2efbb4ffaeea6ba9d79a900aeff844a1798ffa4dbf6184", 0x9e, 0x1000}, {&(0x7f0000000500)="8ef44c162d3bec0a527a21c8b3fca670bc13ae8b1e04b41f86df84f072dcdf1683f0b96b62ae40e6cb29c15c4f0c04ec02471b8bbc9da9d1aef7b69e1c48f90159ee1bd252d1dddc637e18f9e4bb565198b3651bd04a19a219bbd1d3aa55a64b58a1b30f7e4faac4f9aaa92ff5e57c323e1b2967e23773124cdb68bca6582339ad194a385a5cb10c0dcf6406439e1fcd7a9d65bdfe2c85808135c671cf544d44af332a79beea696457f88ac0e16cd8073749de34bb21f50b7767b713cfdb832eb726812ac78e7d8413673e678f261318a5d422ca9b0e7aefb61fa29dbf65dbf6258e23200ef05aed538202e4b1abbcfed5bd2b6857e7f63ce4", 0xf9, 0x35}, {&(0x7f0000000600)="a220c49170e8e63fa9c3321bb8933d460316354312e7301e1c455adc031e6a1bc3fb7964b1e5e4a7c6748bf5f7326fa738075c271a3fac92afba6fc6a0ef909a2d7858ced8441fccf65f480e589366ffe0472480bbf36c49bd60384e9fdf4624ee760c3edbee073b6a21d119b9b5303d030a4e967903f787ee364cdb5587ce865887d4bb44d5d9e2536357145ef6f8fb958ffb0e812426effe1c19739de5261e45ca278b21f8f8f6fb638a61f3766126f26ad2a336ab36cf4c726dfa54da18aabca560f45a8084c9929560293ae15cdfce08ed20d0e614d5023bdc841a063a71712edaf3a232c5951d8963dd98c4", 0xee, 0xffff}], 0x0, &(0x7f0000000780)={[{@balloc_hashed_reloc='block-allocator=hashed_relocation'}, {@barrier_none='barrier=none'}, {@errors_continue='errors=continue'}, {@barrier_none='barrier=none'}, {@acl='acl'}], [{@dont_appraise='dont_appraise'}]}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x54, 0x7, 0x57de, 0x8, 0x1}, &(0x7f0000000040)=0x14) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000240)=0x707, 0x4) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e21, 0x3, @ipv4={[], [], @multicast1}, 0x4}}}, &(0x7f0000000080)=0x84) [ 506.366098][T31628] QAT: failed to copy from user cfg_data. 03:35:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) syslog(0x1, &(0x7f0000000240)=""/98, 0x62) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) mq_unlink(&(0x7f00000002c0)='/dev/vbi#\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x2, 0x2) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0xfffffffffffffffe) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) getpeername$inet(r3, &(0x7f0000000300)={0x2, 0x0, @dev}, &(0x7f0000000340)=0x10) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) 03:35:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, r1) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=[&(0x7f0000000080)='lomd5sum\x00', &(0x7f0000000140)='\x00'], &(0x7f0000000400)=[&(0x7f0000000280)='\xff\xff\xff', &(0x7f00000002c0)='\xff\xff\xff', &(0x7f0000000300)='\xff\xff\xff', &(0x7f0000000340)=',cgroup+\'vmnet0vmnet0procsecurityvboxnet0]\\%\x00', &(0x7f0000000380)=')\x00', &(0x7f00000003c0)='keyring\x00']) r3 = add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000a00)="46ac5128da090e4899c34a28efeb85968ead969e21e33725a7edc030260cdb3ca79964a6e93ce51185f005b7dac052cb797af438c32c29b736fb12c63dd0e504445044a1ae9c10fd8171232ed7dcb08e9acaf4c569c4c1805c47994118fc35ff7f03407dc7093fa7d3132d276a10768b2711cd1c6ecd3545692431856b6e0651412ff7b73711097f061a1b67f6c3d7605eab3b675b6c061e6ef32b7ea8847b6f84da1334d35322b94447bfaca74b152eb64cfa54cb63126c2cc662e7898e6459ed40c4566403f303d341c9c34c6049d9f8e1c2a9483f003c20e66886d0e1629f498668c202f183de294d03da07c9f5feb65bc196554a79a2f255828c1f1cf9a09654f9df849443e8d290debcc78efbdca391a348b33f18ef618011273faa1f095298dd71db08a90e177a1e9a0c771deca3b51670a26850b89d4439574328c19d9e91766dd52169e0ad5011e4acc005861b3b3146d67445e6f6c75ce4af9d8db6963887d79113613267c5bc42fb0aca828590fb291ce8836d3cd391d364efdbb7015d8ec643d83b623380c21c6ebbf774498c94e60838a45d4692bfe73aaea2bbcecb6dcec20e5aa48a950428e2372009212f2f6be608cdec5ff84108f3f3d2e42c99a6d4cd4577ec9f39a51533efe71d494ccadb66eddd4cc0e56b33eefb0ada68ae36c905a977d9042a63299d2130f4e85357b0078c31bc45b00f5ccd879a6735d85882bfddbc6f2cff4a2b976b29e5a8adc74893c748b297a660ba0f64ad8a6ac6fcf180b6a4357ad6733cb75035cd58631142bd720cf52bcd1438647cbe1058e32d33c38f1327bef3f6b1c815ab4f2d47366473ae37c65a2d1df88823dd4c326d640c50e5bddfa976f04cd034331b632cd7a8bbc838081f28f6e24ed646721cea36e56501f9085e428a6c94b7ba5431f59651f36c8f715e4547ffed53c03cc58d2d4382193625cf69c197c4eb3c3c86c291d693837ab7eb23d61d2518379f0c61acf67425afa1ff8d1fac196a7ef9f6f9b514a2028ae010d1bf10833940294c400401ec706ce366dc4c62f6c55c6985a31592360cc7e6cc30a90cae1891b4cffb882b0329457503055db6a8e3b651b3302c24e6d149e8368ee6d3bafbc417256d042b4b87cb1bf46169ad1a593da66b2c6f453180f2c51be35c431e1af07e54c1251334415135422fa81b015a7a746c1979827e3d32057d408016cdc2b641a42626bbf8b7970a5638e9e48783ff80ded5b5184b69d41e60ba9e2ff7ef3e85b4419db2b064d64f833dc2035a6cc3ea28335ad94eb5ba974d9799ce94565559e6a7636b725c4c3dc1702af3c0f3d9dc77f6d404b7c8ff2cec1b4e703451a1d2750d9a22e9f4b5e27da765d228f09bbd30088ac9dff793ec759161849cf4217f5684bff8eddd65be61d3ed2dcc7bae8ab5e1260c3a90cdb37626c4871098802b34f271d8a091b0517bd1588b43cf21b2e3fe676e34d115a56d450d50a97ac7e2ea5904f9695dbde822dba41ac3a1190d63ef486a1829d38b005f9458a82533a555a2f674eea95af7ef7f0cf9654e0ed8d2ab722ca065fd97e6518b76a39cc1b04dc49c395f3aad5e05c76c1881f6a85fee6c6fba8340692eb0b7f3f948350e6947dac635cfef9e4ff4d3f756802cbd97e8c5845b25bc5a021d9875277f197d1bce55661e6961dd788a444962e33fa582a01d0bd61aaa22a76adf68b3169d3f0b49", 0x4c1, r2) keyctl$read(0xb, r3, &(0x7f0000005340)=""/4096, 0xd900) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x40096101, 0x0) 03:35:19 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:auditd_var_run_t:s0\x00', 0x26, 0x1) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={r1, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) ioctl$KDMKTONE(r0, 0x4b30, 0x8001) [ 506.413719][T31626] QAT: Invalid ioctl [ 506.419922][T31623] REISERFS warning (device loop4): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 506.419922][T31623] 03:35:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)='\x00 \x00\x00\x00\x00') clone(0x7fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0xc0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40, 0x40001) renameat2(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00', 0x1) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x40096100, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) [ 506.525597][T31688] QAT: failed to copy from user cfg_data. 03:35:19 executing program 2: add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) clone(0x7ffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000280)='/dev/radio#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x0, 0x0, 0x1f, 0x3f, 0x6, 0x4, 0xfffffffffffffc38, 0xfffffffffffff563, 0x1, 0x0, 0x21e, 0x3ff, 0x1f, 0x8, 0x10001]}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x0, &(0x7f0000000300)}, &(0x7f0000000380)=0x10) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000000)=0x60) ioctl$TCSBRKP(r0, 0x5425, 0x17a) request_key(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0xfffffffffffffffc) 03:35:19 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x1120fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x40096100, 0x0) [ 506.780019][T31758] QAT: Invalid ioctl 03:35:20 executing program 5: timer_create(0x7, &(0x7f0000000300)={0x0, 0x10, 0x7, @thr={&(0x7f0000000200)="6e76213418a9c2612f44b4d8e25c5f7578f0bccb59239a47c53eaed528cc30a396615356", &(0x7f0000000240)="d870232c7f2ee7a5256f8da82fd35711bb2d5e6322fc08187225cac84ccbb3dbff38109f295e57a6875974e5807a8f161e33b0437c8e810df07c7193e3669a3e485d64b5ef056523d7fbf964f4cf6417108a32e8794c0782d6dabc105710faf1093dd5cd66413aa74403b3d0354c087e7a53760a1879295902448130569dc14192b29eb3a7d1c0d559eb0b82fdd993d2b1651435a2e03d3ab3922d15"}}, &(0x7f0000000340)=0x0) timer_settime(r0, 0x1, &(0x7f0000000380), &(0x7f00000003c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x101001, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r2 = open(&(0x7f0000000140)='./file0\x00', 0x200101, 0x132) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000400)) ioctl(r3, 0x1000008912, &(0x7f0000000040)="115ca5055e0bcfec7be070") setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000440)=0x6, 0x4) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000180)={{0x1d, @multicast2, 0x4e24, 0x3, 'fo\x00', 0x16, 0x5, 0x48}, {@multicast1, 0x4e21, 0x2000, 0xc908, 0x5, 0x2}}, 0x44) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000000)=0x1f) [ 506.862901][T31767] QAT: failed to copy from user cfg_data. [ 506.915351][T31762] ================================================================== [ 506.923838][T31762] BUG: KASAN: slab-out-of-bounds in css_task_iter_advance+0x49b/0x540 [ 506.931993][T31762] Read of size 4 at addr ffff8880a998149c by task syz-executor.2/31762 [ 506.940225][T31762] [ 506.942559][T31762] CPU: 0 PID: 31762 Comm: syz-executor.2 Not tainted 5.2.0-rc3-next-20190607 #11 [ 506.951655][T31762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 506.961704][T31762] Call Trace: [ 506.964997][T31762] dump_stack+0x172/0x1f0 [ 506.969334][T31762] ? css_task_iter_advance+0x49b/0x540 [ 506.974796][T31762] print_address_description.cold+0xd4/0x306 [ 506.980774][T31762] ? css_task_iter_advance+0x49b/0x540 [ 506.986236][T31762] ? css_task_iter_advance+0x49b/0x540 [ 506.991716][T31762] __kasan_report.cold+0x1b/0x36 [ 506.996660][T31762] ? __sanitizer_cov_trace_cmp8+0x20/0x20 [ 507.002383][T31762] ? css_task_iter_advance+0x49b/0x540 [ 507.007850][T31762] kasan_report+0x12/0x20 [ 507.012185][T31762] __asan_report_load4_noabort+0x14/0x20 [ 507.017818][T31762] css_task_iter_advance+0x49b/0x540 [ 507.024967][T31762] css_task_iter_start+0x18b/0x230 [ 507.030084][T31762] ? oom_badness+0x6c0/0x6c0 [ 507.037645][T31762] mem_cgroup_scan_tasks+0xaf/0x180 [ 507.048060][T31762] ? mem_cgroup_iter_break+0x30/0x30 [ 507.053369][T31762] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 507.059622][T31762] ? task_will_free_mem+0x139/0x6e0 [ 507.064827][T31762] ? rcu_read_unlock+0x16/0x60 [ 507.069599][T31762] out_of_memory+0x6b2/0x1280 [ 507.074279][T31762] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 507.080086][T31762] ? oom_killer_disable+0x280/0x280 [ 507.085283][T31762] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 507.091100][T31762] mem_cgroup_out_of_memory+0x1ca/0x230 [ 507.096640][T31762] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 507.102275][T31762] ? do_raw_spin_unlock+0x57/0x270 [ 507.107406][T31762] ? _raw_spin_unlock+0x2d/0x50 [ 507.112260][T31762] try_charge+0xfbe/0x1480 [ 507.116674][T31762] ? __check_heap_object+0x50/0xb3 [ 507.121787][T31762] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 507.127324][T31762] ? percpu_ref_tryget_live+0x111/0x290 [ 507.132873][T31762] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 507.139109][T31762] ? kasan_check_read+0x11/0x20 [ 507.143959][T31762] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 507.149508][T31762] mem_cgroup_try_charge+0x24d/0x5e0 [ 507.154791][T31762] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 507.160429][T31762] wp_page_copy+0x416/0x1770 [ 507.165020][T31762] ? find_held_lock+0x35/0x130 [ 507.169787][T31762] ? pmd_pfn+0x1d0/0x1d0 [ 507.174028][T31762] ? lock_downgrade+0x920/0x920 [ 507.178966][T31762] ? swp_swapcount+0x540/0x540 [ 507.183732][T31762] ? kasan_check_read+0x11/0x20 [ 507.188578][T31762] ? do_raw_spin_unlock+0x57/0x270 [ 507.193702][T31762] do_wp_page+0x48e/0x1500 [ 507.198126][T31762] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 507.203509][T31762] __handle_mm_fault+0x22e3/0x3eb0 [ 507.208626][T31762] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 507.214172][T31762] ? handle_mm_fault+0x292/0xa90 [ 507.219117][T31762] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 507.225364][T31762] ? kasan_check_read+0x11/0x20 [ 507.230218][T31762] handle_mm_fault+0x3b7/0xa90 [ 507.234982][T31762] __do_page_fault+0x5ef/0xda0 [ 507.239750][T31762] do_page_fault+0x71/0x57d [ 507.244253][T31762] ? page_fault+0x8/0x30 [ 507.248499][T31762] page_fault+0x1e/0x30 [ 507.252647][T31762] RIP: 0033:0x40bc28 [ 507.256539][T31762] Code: 00 00 49 8d be 88 00 00 00 48 89 ea 48 89 de 0f 85 dd 00 00 00 e8 38 2c 00 00 8b 05 e2 c3 32 00 48 8b 15 73 48 66 00 83 c0 01 <89> 05 d2 c3 32 00 89 02 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f [ 507.276151][T31762] RSP: 002b:00007fff360e5230 EFLAGS: 00010202 [ 507.282217][T31762] RAX: 0000000000000001 RBX: 0000001b2bd20014 RCX: 0000001b2cd20000 [ 507.290193][T31762] RDX: 0000001b2bd20000 RSI: 000000000000035f RDI: ffffffffc260e35f [ 507.298162][T31762] RBP: 0000001b2bd20018 R08: 00000000c260e35f R09: 00000000c260e363 [ 507.306335][T31762] R10: 00007fff360e5370 R11: 0000000000000246 R12: 0000001b2bd2001c [ 507.314306][T31762] R13: 000000000007bbdd R14: 000000000075bf20 R15: 000000000075bf2c [ 507.322293][T31762] [ 507.324616][T31762] Allocated by task 8701: [ 507.328950][T31762] save_stack+0x23/0x90 [ 507.333103][T31762] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 507.338729][T31762] kasan_kmalloc+0x9/0x10 [ 507.343046][T31762] __kmalloc+0x15c/0x740 [ 507.347297][T31762] __register_sysctl_table+0xc7/0xef0 [ 507.352672][T31762] register_net_sysctl+0x29/0x30 [ 507.357618][T31762] __devinet_sysctl_register+0x17d/0x2c0 [ 507.363242][T31762] devinet_sysctl_register+0x167/0x220 [ 507.368696][T31762] inetdev_init+0x22e/0x470 [ 507.373188][T31762] inetdev_event+0xef3/0x1450 [ 507.377857][T31762] notifier_call_chain+0xc2/0x230 [ 507.382877][T31762] raw_notifier_call_chain+0x2e/0x40 [ 507.388174][T31762] call_netdevice_notifiers_info+0x3f/0x90 [ 507.393984][T31762] register_netdevice+0xa4d/0xff0 [ 507.399009][T31762] __ip_tunnel_create+0x36b/0x530 [ 507.404028][T31762] ip_tunnel_init_net+0x375/0x9e0 [ 507.409082][T31762] vti_init_net+0x2f/0x370 [ 507.413495][T31762] ops_init+0xb3/0x410 [ 507.417559][T31762] setup_net+0x2d3/0x740 [ 507.421793][T31762] copy_net_ns+0x1df/0x340 [ 507.426210][T31762] create_new_namespaces+0x400/0x7b0 [ 507.431497][T31762] unshare_nsproxy_namespaces+0xc2/0x200 [ 507.437131][T31762] ksys_unshare+0x444/0x980 [ 507.441633][T31762] __x64_sys_unshare+0x31/0x40 [ 507.446395][T31762] do_syscall_64+0xfd/0x680 [ 507.450900][T31762] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 507.456774][T31762] [ 507.459092][T31762] Freed by task 8684: [ 507.463074][T31762] save_stack+0x23/0x90 [ 507.467221][T31762] __kasan_slab_free+0x102/0x150 [ 507.472152][T31762] kasan_slab_free+0xe/0x10 [ 507.476643][T31762] kfree+0x106/0x2a0 [ 507.480535][T31762] tomoyo_supervisor+0x360/0xef0 [ 507.485476][T31762] tomoyo_env_perm+0x18e/0x210 [ 507.490239][T31762] tomoyo_find_next_domain+0x1354/0x1f6c [ 507.495872][T31762] tomoyo_bprm_check_security+0x124/0x1b0 [ 507.501604][T31762] security_bprm_check+0x63/0xb0 [ 507.506560][T31762] search_binary_handler+0x71/0x570 [ 507.511766][T31762] __do_execve_file.isra.0+0x1310/0x22f0 [ 507.517408][T31762] __x64_sys_execve+0x8f/0xc0 [ 507.522092][T31762] do_syscall_64+0xfd/0x680 [ 507.526605][T31762] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 507.532485][T31762] [ 507.534814][T31762] The buggy address belongs to the object at ffff8880a9980c80 [ 507.534814][T31762] which belongs to the cache kmalloc-2k of size 2048 [ 507.548881][T31762] The buggy address is located 28 bytes to the right of [ 507.548881][T31762] 2048-byte region [ffff8880a9980c80, ffff8880a9981480) [ 507.562673][T31762] The buggy address belongs to the page: [ 507.568317][T31762] page:ffffea0002a66000 refcount:1 mapcount:0 mapping:ffff8880aa400c40 index:0x0 compound_mapcount: 0 [ 507.579351][T31762] flags: 0x1fffc0000010200(slab|head) [ 507.584748][T31762] raw: 01fffc0000010200 ffffea00026f0d08 ffffea0002871608 ffff8880aa400c40 [ 507.593331][T31762] raw: 0000000000000000 ffff8880a9980400 0000000100000003 0000000000000000 [ 507.601897][T31762] page dumped because: kasan: bad access detected [ 507.608296][T31762] [ 507.610614][T31762] Memory state around the buggy address: [ 507.616414][T31762] ffff8880a9981380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 507.624479][T31762] ffff8880a9981400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 507.632532][T31762] >ffff8880a9981480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 507.640680][T31762] ^ [ 507.645525][T31762] ffff8880a9981500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.653580][T31762] ffff8880a9981580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 507.661633][T31762] ================================================================== [ 507.669687][T31762] Disabling lock debugging due to kernel taint [ 507.675856][T31762] Kernel panic - not syncing: panic_on_warn set ... [ 507.682444][T31762] CPU: 0 PID: 31762 Comm: syz-executor.2 Tainted: G B 5.2.0-rc3-next-20190607 #11 [ 507.692932][T31762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 507.702975][T31762] Call Trace: [ 507.706276][T31762] dump_stack+0x172/0x1f0 [ 507.710612][T31762] panic+0x2cb/0x744 [ 507.714504][T31762] ? __warn_printk+0xf3/0xf3 [ 507.719093][T31762] ? css_task_iter_advance+0x49b/0x540 [ 507.724548][T31762] ? trace_hardirqs_off+0x62/0x220 [ 507.729651][T31762] ? trace_hardirqs_off+0x59/0x220 [ 507.734858][T31762] ? css_task_iter_advance+0x49b/0x540 [ 507.740315][T31762] end_report+0x47/0x4f [ 507.744485][T31762] ? css_task_iter_advance+0x49b/0x540 [ 507.749940][T31762] __kasan_report.cold+0xe/0x36 [ 507.754788][T31762] ? __sanitizer_cov_trace_cmp8+0x20/0x20 [ 507.760503][T31762] ? css_task_iter_advance+0x49b/0x540 [ 507.765953][T31762] kasan_report+0x12/0x20 [ 507.770367][T31762] __asan_report_load4_noabort+0x14/0x20 [ 507.775991][T31762] css_task_iter_advance+0x49b/0x540 [ 507.781275][T31762] css_task_iter_start+0x18b/0x230 [ 507.786382][T31762] ? oom_badness+0x6c0/0x6c0 [ 507.790966][T31762] mem_cgroup_scan_tasks+0xaf/0x180 [ 507.796182][T31762] ? mem_cgroup_iter_break+0x30/0x30 [ 507.801484][T31762] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 507.807727][T31762] ? task_will_free_mem+0x139/0x6e0 [ 507.812924][T31762] ? rcu_read_unlock+0x16/0x60 [ 507.817688][T31762] out_of_memory+0x6b2/0x1280 [ 507.822370][T31762] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 507.828179][T31762] ? oom_killer_disable+0x280/0x280 [ 507.833387][T31762] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 507.839228][T31762] mem_cgroup_out_of_memory+0x1ca/0x230 [ 507.851243][T31762] ? mem_cgroup_nr_lru_pages+0x1b0/0x1b0 [ 507.862152][T31762] ? do_raw_spin_unlock+0x57/0x270 [ 507.867268][T31762] ? _raw_spin_unlock+0x2d/0x50 [ 507.872123][T31762] try_charge+0xfbe/0x1480 [ 507.876542][T31762] ? __check_heap_object+0x50/0xb3 [ 507.881750][T31762] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 507.887299][T31762] ? percpu_ref_tryget_live+0x111/0x290 [ 507.895354][T31762] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 507.901596][T31762] ? kasan_check_read+0x11/0x20 [ 507.906450][T31762] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 507.911995][T31762] mem_cgroup_try_charge+0x24d/0x5e0 [ 507.917282][T31762] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 507.922912][T31762] wp_page_copy+0x416/0x1770 [ 507.927571][T31762] ? find_held_lock+0x35/0x130 [ 507.932334][T31762] ? pmd_pfn+0x1d0/0x1d0 [ 507.936569][T31762] ? lock_downgrade+0x920/0x920 [ 507.941419][T31762] ? swp_swapcount+0x540/0x540 [ 507.946181][T31762] ? kasan_check_read+0x11/0x20 [ 507.951030][T31762] ? do_raw_spin_unlock+0x57/0x270 [ 507.956145][T31762] do_wp_page+0x48e/0x1500 [ 507.960571][T31762] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 507.965952][T31762] __handle_mm_fault+0x22e3/0x3eb0 [ 507.971070][T31762] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 507.976629][T31762] ? handle_mm_fault+0x292/0xa90 [ 507.981613][T31762] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 507.987872][T31762] ? kasan_check_read+0x11/0x20 [ 507.992742][T31762] handle_mm_fault+0x3b7/0xa90 [ 507.997532][T31762] __do_page_fault+0x5ef/0xda0 [ 508.002333][T31762] do_page_fault+0x71/0x57d [ 508.006876][T31762] ? page_fault+0x8/0x30 [ 508.011138][T31762] page_fault+0x1e/0x30 [ 508.015310][T31762] RIP: 0033:0x40bc28 [ 508.019224][T31762] Code: 00 00 49 8d be 88 00 00 00 48 89 ea 48 89 de 0f 85 dd 00 00 00 e8 38 2c 00 00 8b 05 e2 c3 32 00 48 8b 15 73 48 66 00 83 c0 01 <89> 05 d2 c3 32 00 89 02 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f [ 508.038836][T31762] RSP: 002b:00007fff360e5230 EFLAGS: 00010202 [ 508.044910][T31762] RAX: 0000000000000001 RBX: 0000001b2bd20014 RCX: 0000001b2cd20000 [ 508.052881][T31762] RDX: 0000001b2bd20000 RSI: 000000000000035f RDI: ffffffffc260e35f [ 508.060857][T31762] RBP: 0000001b2bd20018 R08: 00000000c260e35f R09: 00000000c260e363 [ 508.068838][T31762] R10: 00007fff360e5370 R11: 0000000000000246 R12: 0000001b2bd2001c [ 508.076816][T31762] R13: 000000000007bbdd R14: 000000000075bf20 R15: 000000000075bf2c [ 509.215353][T31762] Shutting down cpus with NMI [ 509.221650][T31762] Kernel Offset: disabled [ 509.226005][T31762] Rebooting in 86400 seconds..